Forty Months for a Yes

SEPTEMBER 20, 2026

On September 16, Deutsche Bank AG said it plans to launch a digital-asset custody service for European institutional and corporate clients before the end of this year, subject to the completion of regulatory checks, with an aim of onboarding its first clients in the following months. At launch the platform is meant to hold five things: Bitcoin, Ether, and three stablecoins — USDC, EURC and EURAU. Target customers are asset managers, hedge funds, brokers, other custodians and sovereign institutions, served through the bank's Corporate Bank and Investment Bank divisions. Gerald Podobnik, co-head of the Corporate Bank, put the bank's own framing on it: "Digital assets are not a replacement for the traditional financial system but an important complement to it. We see them as new rails that coexist with existing market infrastructures." That's the announcement. It's a normal one, in a year when it's stopped being news that a large bank wants to hold crypto for its clients. The part worth an entry is the clock running underneath it.

What "Custody" Actually Means Here

Worth being precise about, since headlines compress it: Deutsche Bank is not proposing to buy Bitcoin for its own balance sheet, and this isn't a trading desk. Custody means holding the cryptographic keys that control a client's coins — the bank becomes the vault, not the buyer. The design the bank has described uses hardware-based key protection, transactions requiring multiple people to approve, and separate "warm" (connected, for day-to-day movement) and "cold" (offline, for the bulk of holdings) storage, with its own backup and recovery controls layered on top. Two outside firms are building it: Taurus, a Swiss digital-asset infrastructure company that already serves more than two dozen institutional clients and that Deutsche Bank itself put money into — a $65 million round in 2023 — and Bitpanda Technology Solutions, the enterprise arm of the Austrian exchange Bitpanda. So part of what's being announced is a return on an investment the bank already made. Tokenized financial instruments — bonds and funds represented on a blockchain rather than crypto itself — sit further out on the same roadmap, not part of this launch.

Forty Months, While Four Smaller Banks Got There First

Here's the number the announcement doesn't mention. Deutsche Bank applied to BaFin, Germany's financial regulator, for a digital-asset custody licence in June 2023. By its own account it doesn't expect that licence until October 2026. That's roughly forty months from application to answer — and this week's announcement, the one with a target of "before the end of this year," is still written entirely in the subjunctive: "subject to," "pending," "aiming to."

Measure that against the rest of the German banking sector, which spent the same three and a half years actually getting licensed:

• Commerzbank — Germany's second-largest bank — applied around January 2023, five months before Deutsche Bank, and was granted its custody licence that November: about ten months, and the first full-service German bank to get one.
• Landesbank Baden-Württemberg, a regional Landesbank, authorized April 2024.
• DekaBank, the German savings banks' central asset manager, approved December 2024.
• DZ Bank, the central institution for Germany's cooperative banks, registered as a crypto-asset service provider under the EU's MiCA framework in December 2025.

Every one of those four is smaller than Deutsche Bank by balance sheet. All four finished before Europe's largest bank got its answer — and Deutsche Bank's answer, again, is still a projection, not a licence in hand. Neither the bank nor BaFin has said publicly why a request from Germany's biggest, most systemically significant bank should take four times as long as one from its second-biggest rival. The most obvious honest guess is that a global systemically important bank gets a proportionally heavier prudential review than a Landesbank does — more balance sheet, more interconnection, more to check — but that's my inference, not something either institution has confirmed, and Commerzbank is hardly a small regional lender either. What's certain is only the calendar: the biggest name in the room asked first among big banks and, on present projections, will be answered last.

Why Now, and Why This Looks Late Rather Than Early

The regulatory backdrop explains the urgency, if not the delay. The EU's Markets in Crypto-Assets Regulation, MiCA, finished its transitional grandfathering period on July 1, 2026 — after that date, a crypto-asset service provider serving EU customers without full authorization is operating outside the rules. By the middle of this year, more than 210 firms held that authorization across 23 member states, concentrated in the Netherlands, Malta, Cyprus, France and Ireland — smaller, faster-moving jurisdictions, not Germany's universal banks. Meanwhile the institutional-custody market Deutsche Bank is entering was already being built by banks with less patience for the queue: Standard Chartered folded its Zodia Custody unit fully in-house this year rather than run it as a separate venture; Société Générale's Forge subsidiary and the Swiss bank Sygnum have both been selling custody and stablecoin rails to other banks for several years. So this isn't Europe's biggest bank arriving first at a market with no infrastructure. It's arriving, on its own admitted timeline, after a set of smaller and more aggressive rivals already built the market it's now asking permission to join — with the one advantage that when it does arrive, it brings the deposits, the balance sheet and the brand that a specialist custodian doesn't have.

What I'll Be Watching

• Whether October 2026 holds. A licence "expected" in a named month, after a filing that already ran three years past a normal timeline, is exactly the kind of date that slips — and the bank's own language ("subject to regulatory checks") is written to allow that.
• Whether BaFin, or Deutsche Bank, ever explains the gap. Forty months against a ten-month peer is a big enough spread that it's a legitimate press question, not just an observation from outside.
• Whether the asset list grows past five. The bank has said the range may expand "subject to client demand and regulatory processes" — Solana or a second stablecoin issuer would be the obvious next additions if institutional demand is real rather than a press-release hedge.

Where I Could Be Wrong

• The exact filing and approval dates come from trade-press reporting on Deutsche Bank's and BaFin's own disclosures, not a document I've read myself from BaFin — "June 2023" and "October 2026" are both reported as approximate months, not exact dates, so "forty months" is a round figure, not a day count.
• The four comparison banks may not all hold the identical instrument. Commerzbank's and Deutsche Bank's licences are both reported as the German crypto-custody licence created under national banking law before MiCA fully applied; DZ Bank's December 2025 event is described as a MiCA crypto-asset-service-provider registration, a related but not necessarily identical legal instrument under the newer EU-wide regime. The comparison is fair as "how long did each bank take to get regulatory clearance for this business," which is what the entry is actually measuring, but the underlying legal baskets may not be perfectly apples-to-apples.
• No one on the record has confirmed why Deutsche Bank's review is taking longer. The "bigger bank, heavier review" explanation is my own inference from the pattern, not a stated reason from BaFin or the bank — a simpler explanation, like case-queue ordering or an incomplete-application delay, could also be true and I have no way to rule it out from outside.
• The MiCA CASP count ("more than 210 firms") is a mid-2026 snapshot from industry trackers, not a live regulator count, and firms are still being authorized every month — the exact number will already be higher by the time this is read.
• The asset list itself could still change. Deutsche Bank's own announcement says the assets, the timing and the service's scope are all subject to change based on client demand, regulatory requirements and the bank's own risk appetite — this entry describes the plan as announced on September 16, not a locked commitment.
• I hold no position in Deutsche Bank stock, EURAU or any of the assets named here. My own book is Bitcoin through an ETF and Strategy Inc. A large bank offering institutional custody is one more piece of plumbing that makes it easier for large pools of capital to hold Bitcoin — a mild, indirect positive for the thesis I already hold — but it changes nothing about the price today, and none of this is investment advice.

Sources

1. Deutsche Bank AG. Press statement on planned digital-asset custody service, 16 September 2026, quoted via CoinDesk.
2. The Industry Spread. Deutsche Bank's crypto custody licence is due 40 months after filing. September 2026. theindustryspread.com
3. Unchained. Deutsche Bank Confirms Bitcoin and Ether Custody Launch, Still Subject to Regulators. September 2026. unchainedcrypto.com
4. CoinDesk. Deutsche Bank nears crypto custody service debut for institutional clients. 16 September 2026. coindesk.com
5. The Block. Deutsche Bank plans crypto custody launch in 2026 with support from Bitpanda. September 2026. theblock.co
6. Coindesk. Germany's AllUnity Launches BaFin-Regulated Euro Stablecoin EURAU. 31 July 2025. coindesk.com
7. Coindesk. Germany's Commerzbank Wins Crypto Custody License. 15 November 2023. coindesk.com
8. Ledger Insights. Commerzbank lands digital asset custody license for crypto, tokenization. 2023. ledgerinsights.com
9. InnReg. Markets in Crypto-Assets Regulation (MiCA) Updated Guide. 2026. innreg.com
10. CoinDesk. Deutsche Bank to Delve Into Crypto Custody, Tokenization With Taurus. 14 September 2023. coindesk.com