19% VAT on Crypto Purchases

If a letter reaches you demanding, in the name of the Federal Ministry of Finance, 19 percent VAT on your purchase of cryptocurrency, the answer is short: no such claim exists in German tax law, and the ministry does not send it. The Federal Ministry of Finance has listed this exact letter as a forgery on its warning page since September 1, 2026. Pay nothing, do not reply, click no link.

The case still deserves more than three sentences, because this wave is better built than the usual bulk emails. The perpetrators cite real transactions, they use official terminology, and they hit a nerve: since the start of 2026, trading platforms have been reporting user data to the tax authorities, and many investors are expecting mail from the authorities anyway. That expectation is exactly what the scam exploits.

Fake finance ministry letters on crypto VAT: what the ministry reported on September 1

On the page warnings from the Federal Ministry of Finance, as of September 1, 2026, the case is set out in spare words. In a forged letter, the ministry supposedly confirms that a company selling cryptocurrency, meaning a crypto exchange or a crypto broker, is authorised to collect 19 percent VAT on the acquisition of cryptocurrency. The letter refers to transactions that actually took place, and the accompanying email urges the recipient to get in touch as quickly as possible.

Three building blocks sit in that description, and each one works on its own. The first is the supposed authorisation, meant to explain why a trading venue rather than the tax office wants money. The second is the reference to a genuine purchase, which lends the letter a credibility no bulk email could ever have. The third is the demand to make contact quickly, because a conversation brings victims to pay faster than a form.

In the same warning, the ministry names further variants in circulation at the same time. They include invented special payments for the summer of 2026, for which recipients are asked to supply their tax identification numbere minister, and emails about refunds that allegedly could not be delivered. The crypto variant is therefore not an isolated case, but the part of a broader wave tailored to investors

19 percent VAT on a crypto purchase: why German tax law knows no such claim

The core of the forgery is a tax assertion that can be refuted in a single sentence. Exchanging euros for Bitcoin and back is exempt from VAT. That is not a matter of interpretation, but has been settled for more than ten years.

What section 4 no. 8 letter b of the German VAT Act has to do with your purchase

On October 22, 2015, the European Court of Justice ruled in case C-264/14, known as the Hedqvist case, that exchanging conventional currencies for Bitcoin and vice versa is an exempt supply within the meaning of the VAT Directive. The Federal Ministry of Finance adopted that judgment into German administrative practice with its circular of February 27, 2018. Since then the position is: the exchange is a supply of services exempt under section 4 no. 8 letter b of the German VAT Act. Anyone using cryptocurrency as a means of payment likewise triggers no VAT.

A VAT charge of 19 percent on the acquisition of cryptocurrency would therefore not only be unusually high, it would contradict the applicable law on a point that has been in every tax handbook since 2018. A ministry does not authorise anyone to collect a tax that does not exist.

The one place where VAT really does appear

For the sake of completeness: the exemption applies to the exchange itself. VAT can arise on certain services around trading, for instance on services a platform bills separately. But that always runs through the provider’s invoice or statement, in which the tax is shown openly. It is never claimed retrospectively through a letter from the ministry, and it never amounts to 19 percent of the purchase sum in any case. Anyone wanting to know which costs really arise with which provider will find the orderly overview in the comparison of crypto tax tools and portfolio trackers, because record-keeping for the tax return is considered there as well.

Reference to real transactions: why this detail makes the letter so dangerous

The most dangerous sentence in the warning is the one about transactions that actually took place. Anyone opening a letter that names a purchase with an approximate amount and date loses their natural scepticism. The usual reflex, that fraudsters know nothing about you, does not apply here.

Where such details can come from cannot be said with certainty, and we do not claim otherwise. Several routes are known by which purchase and address data belonging to crypto customers have entered circulation: data leaks at service providers who process orders on behalf of companies, compromised support systems, and the resale of older customer lists. How such an address list ends up in a physical letter was described by cryptoticker.io on August 25, 2026, using the example of the phishing letters sent to wallet owners. The pattern is the same, only the target differs: there it was about the recovery phrase, here about a bank transfer.

For you, an uncomfortable but useful assumption follows. Assume that a sender may know your name, your address and rough details of a purchase, without that saying anything about their authenticity. The check therefore has to start somewhere else, namely with jurisdiction and with the route the demand takes.

Who sets taxes in Germany and how the assessment arrives

In its warning, the Federal Ministry of Finance formulates a rule that works as a test: only the tax offices set taxes, and as a rule they always do so by post. Neither the ministry itself nor the Federal Central Tax Office charges fees to citizens or sets taxes. None of these bodies sends text messages, messenger messages or emails to private individuals on their own initiative.

That yields a simple test that works without specialist knowledge. If a payment demand names a sender other than your competent tax office, something is wrong. If the demand arrives by email or messenger, something is wrong. If the money is meant to go to a company rather than a tax office account, something is wrong. And a tax assessment that genuinely exists always names a tax number, a tax office and a notice of appeal explaining your right to object.

Document your crypto taxes properly

550 euros for a supposed account release: the second forged ministry letter

Running alongside the crypto variant is a letter with the English title Formal Notice of Final Statutory Tax Clearance Requirement and Reinstatement Assurance. In it, recipients are told to pay 550 euros to have a supposed block on their bank account lifted. The Federal Ministry of Finance also lists this letter in its warning as a forgery and refers to the Federal Financial Supervisory Authority for details.

The English title is a giveaway in itself. German tax authorities correspond with private individuals in German, and they do not invent labels that sound like international compliance. A title that manufactures authority through a foreign language is a warning sign, not proof of authenticity. The same goes for the invented procedure behind it: an account is blocked by the bank or by court order, and it is not unblocked by a payment to a ministry.

Forged Federal Central Tax Office notices: file reference 120. G59 201 729 as the tell

A second authority has been affected for months. On June 30, 2026, the Federal Central Tax Office issued a warning about a renewed wave of deception attempts. According to it, perpetrators are sending phishing emails carrying the authority’s official logo, with a forged notice attached.

The content of these notices varies. Sometimes it concerns a fine for failing to disclose turnover figures, sometimes the verification of an IBAN in connection with a SEPA direct debit mandate. According to the authority, one detail stays the same across all variants, namely the file reference 120. G59 201 729. Anyone finding that reference on a letter is holding a forgery, no matter how good the rest looks.

In the same notice, the Federal Central Tax Office names three features that hold beyond this one wave. Payment demands by email or text message are unusual, because the authority sends them by post. Letters with language errors point to an attempted fraud. And transfers to accounts abroad do not occur with a German tax authority.

ELSTER phishing with the subject line security verification: why you never log in

The third trail targets the tax portal itself. The ministry’s warnings list forged emails that pose as coming from ELSTER, with a title along the lines of security verification required, release tax credit. A refund of income tax is promised, and a one-off digital identity confirmation is demanded, for which you are supposed to log in to your own account

The sequence matches what crypto investors know from fake verification pages. First comes a plausible pretext, then a link, then a login mask that rebuilds the original. cryptoticker.io described this pattern on August 31, 2026, in relation to the fake AML check pages for wallets. The protection is the same in both cases and it is boring: call up the portal yourself, through your own bookmark or by typing the address. A certificate, a tax account or a wallet approval is never confirmed through a link in an incoming message.

A special case concerns people who trade actively. According to the ministry, bank details belonging to the federal treasury are currently being misused, particularly in connection with the trading activities of private companies: customers are asked to make payments in favour of the federal treasury that have no connection with it whatsoever. If a trading provider asks you to transfer a tax or fee to a government account before a payout, that is not a formality but the end of the matter.

IMF, ECB and AMLA as supposed senders: institutions that levy no taxes

In its warning, the Federal Ministry of Finance repeats a note from the police that is particularly important for crypto investors. Perpetrators repeatedly try to collect fees or taxes, for instance for a supposed inheritance or a crypto gain, in the name of the ministry or of international institutions such as the International Monetary Fund, the European Central Bank or the European anti-money-laundering authority AMLA.

This construction turns up regularly at the end of an investment fraud. A portfolio shows a large gain, the payout supposedly fails because of a levy, and the levy is meant to go to an authority whose name makes an impression. None of the institutions named charges fees to private individuals or sets taxes. AMLA supervises obliged entities under anti-money-laundering law, the European Central Bank runs monetary policy and banking supervision, and the International Monetary Fund has nothing to do with your tax return. If a platform demands such a payment before a payout, first check whether it is licensed at all. The overview of regulated crypto exchanges with a European licence is the quickest way in.

Regulated crypto exchanges at a glance

Crypto and the tax office: what the state really wants from you

The scam also works because many people do not know exactly what is coming their way for tax purposes. A quick comparison helps separate the real from the invented.

Gains from selling cryptocurrency are, in Germany, a private disposal transaction under section 23 of the Income Tax Act. If more than a year lies between purchase and sale, the gain remains tax-free. Within the one-year period it is taxable as soon as the sum of all private disposal gains in the calendar year reaches the exemption threshold of 1,000 euros, which has applied since the 2024 assessment period. That is a threshold, not an allowance: once it is reached, the entire gain is taxable, not merely the excess. Swapping one cryptocurrency for another counts as a sale.

You declare this tax yourself in your income tax return. It is collected neither by an exchange nor by a broker, and it is certainly not demanded through a letter from the ministry. Anyone who has documented their purchases and sales cleanly can identify an invented demand as such within minutes, because they know their own figures.

The platforms’ reporting duty and what it does not mean

The second real process is the reporting duty of providers. cryptoticker.io described it in detail on February 22, 2026, in its article on the reporting duty under DAC8: platforms transmit details about their users and their transactions to the tax authorities, and for that purpose they ask their customers for a tax identification number and a self-certification. How closely that request is now tied to deadlines and account restrictions is shown in our article of August 17, 2026, on the self-certification at the crypto exchange.

What matters is the difference in the sequence. Your exchange asks for data inside the logged-in account, or by a message sent from within the account. The tax office asks for nothing by email and demands no payment that wants to collect tax data for your exchange, it has swapped the two roles. That is exactly where the forgery can be pinned down

Five features that identify a forged tax letter about your crypto account

The following points come from the warnings issued by the ministry and the Federal Central Tax Office. These features hold regardless of how professionally a letter is designed.

1. The wrong sender for a tax demand. Only your competent tax office sets taxes. The ministry, the Federal Central Tax Office, the ECB, the IMF or AMLA do not.
2. The wrong route. Payment demands come by post. A payment demand by email, text message or messenger is a warning sign.
3. A recipient account that does not fit. Payments to a German tax authority never go to a foreign private or company account.
4. Time pressure and a demand for contact. The instruction to get in touch as quickly as possible is there to draw you into a conversation before you check.
5. A tax that does not exist. Nineteen percent VAT on the acquisition of cryptocurrency contradicts the applicable law.

If doubt remains, there is one route that always works: call your tax office on the number you look up yourself, not the number in the letter. Ask whether the case is known there. That costs ten minutes and settles the matter in the vast majority of cases.

If you have already paid or given away data: bank, police, tax office

For that case, the Federal Central Tax Office sets out a clear order. Anyone who has disclosed personal data or made payments because of a fraudulent message should inform the bank and the police immediately. With a transfer, speed decides whether the process can still be stopped, because a recall is only possible as long as the money has not been credited and passed on.

After that comes the report to the police, which you can also file online through your federal state’s online police station. Keep everything you have: the envelope, the letter, the email with its full header, the transfer receipt. If you entered login details, change the passwords of the accounts concerned and check the two-factor settings of your exchange accounts. If tax data was involved, also inform your tax office, so that it knows your tax identification number may be in circulation.

One point remains unpleasant and should be said anyway: a transfer abroad that has already been executed is rarely recovered. That makes the step before it count all the more, namely checking before paying. Anyone who is unsure loses nothing by waiting a day, because a genuine tax demand does not expire overnight and does not become more expensive because you asked first.

Spotting forged ministry letters: what to take away

1. Check the sender and the route before you read the content. Only your tax office sets taxes, and it does so by post. Anyone documenting their purchases and sales cleanly anyway will spot an invented demand at once. The right tools for that are in the comparison of crypto tax tools and portfolio trackers.
2. Clarify whether your provider is licensed at all. If a platform demands a tax or fee to an authority before a payout, that is a reason to break off. Which providers hold a European licence is shown in the overview of regulated crypto exchanges.
3. Keep your trading routes separate from your inbox. Log in to exchanges and to the tax portal only through bookmarks you set yourself, never through links in messages. Where to buy and which terms apply there is set out in the comparison of crypto exchanges.

(As of September 5, 2026. This article is not investment advice. Prices and fee structures change; check the terms with the provider before you buy.)

Transparency note: This article was produced with the assistance of artificial intelligence and reviewed by our editorial team before publication. All figures and claims were checked against the primaryI

More from CryptoTicker

Source: cryptoticker.io