# BaFin WpIG, AMF Sapin 2, CNMV & CONSOB Conduct Guide 2026

> Comprehensive 2026 EEA guide to BaFin WpIG/MaComp, AMF Loi Sapin 2 ad bans, CNMV July 2023 CFD rules, CONSOB ISP blackouts, and AFM/FSMA interventions.

Canonical: https://eurofirmledger.com/bulletins/bafin-wpig-amf-sapin-2-cnmv-consob-conduct-interventions-2026
Last updated: 2026-11-14T19:49:27.067Z

**Publication:** Euro Firm Ledger
**Category:** Bafin Wplg Amf Consob Cnmv Supervision
**Published:** 2026-11-14T19:20:25.915Z
**Author:** Lukas Lindqvist, CEFA (Certified European Financial Analyst (EFFAS/CEFA, Frankfurt & Zurich))
**Reviewer:** Not recorded

## Answer-first summary

Holding an EU MiFID II passport does not grant uniform marketing freedom: BaFin, AMF, CNMV, CONSOB, AFM, and FSMA enforce permanent MiFIR Article 42 and domestic advertising bans across Continental Europe.

## Key takeaways

- MiFID II Article 34 and 35 passports never override host-country MiFIR Article 42 permanent product-intervention decrees or non-discriminatory domestic advertising prohibitions.
- Belgium (FSMA 2016) bans retail OTC CFD distribution completely, while Spain (CNMV July 2023) and France (Loi Sapin 2) outlaw retail CFD mass marketing, affiliates, and sponsorships.
- Germany (BaFin) expanded retail negative-balance protection beyond OTC CFDs to cover exchange-traded futures with additional margin obligations, while the Dutch AFM capped listed Turbos.
- Italy’s CONSOB wields rapid DNS/IP telecom blackout powers under Article 7-octies TUF, having blocked over 1,100 abusive financial domains from reaching Italian retail savers.

## Related financial entities

- **French Monetary and Financial Code (AMF / ACPR)** (AMF-ACPR) — license: Dual regulatory system where the ACPR oversees prudential authorization and solvency while the AMF approves business plans and monitors market conduct.
- **German Investment Institutions Act (WpIG / BaFin)** (BAFIN-WPIG) — license: Specialized German regulatory statute transposing the EU Investment Firms Directive (IFD), administered by BaFin and the Deutsche Bundesbank.
- **MiFID II Cross-Border Passporting Framework** (MIFID2-PASS) — license: Harmonized European framework allowing authorized investment firms to provide investment services across all EU member states and EEA countries.
- **Spanish National Securities Market Commission (CNMV)** (CNMV-ES) — license: Agency responsible for the financial regulation and supervision of the securities markets in Spain and all participants in those markets.

## Analysis

Holding an active [MiFID II Article 34 or Article 35 passport](/bulletins/mifid-ii-article-34-35-eea-passporting-host-nca-guide-2026) authorizes cross-border investment service provision across the European Economic Area, yet **never preempts permanent national product-intervention decrees under MiFIR Article 42 or domestic public-interest advertising bans**. Across Continental Europe's largest retail wealth pools—Germany ([BaFin](/competent-authorities/bafin)), France ([AMF](/competent-authorities/amf)), Spain ([CNMV](/competent-authorities/cnmv)), Italy ([CONSOB](/competent-authorities/consob)), the Netherlands ([AFM](/competent-authorities/afm)), Belgium ([FSMA](/competent-authorities/fsma)), and Poland ([KNF](/competent-authorities/knf))—national competent authorities layer strict local prohibitions over ESMA's baseline rulebook, banning OTC retail CFDs outright in Belgium, outlawing retail CFD mass marketing and influencer sponsorships in Spain and France, eliminating retail futures margin-call deficits in Germany, and blacking out unauthorized domains at the ISP DNS level in Italy.

This cornerstone supervisory handbook anchors our [national conduct interventions topic hub](/topics/bafin-wplg-amf-consob-cnmv-supervision), linking directly to our [EU IFR/IFD prudential capital guide](/bulletins/eu-ifr-ifd-class-1-2-3-prudential-capital-k-factor-guide-2026), [broker registry](/compare), and all 19 country-specific enforcement deep dives in this cluster.

## Two Statutory Engines Behind Divergent National Conduct Overlays

Why do cross-border brokers like [CAPEX.com](/firms/capex), [Bitpanda](/firms/bitpanda), [1Market](/firms/1markets), [Colmex Pro](/firms/colmex-pro), and [Change](/firms/change) maintain 10+ country-specific geo-fenced onboarding and ad-routing engines inside a "Single Market"? Because EU financial law grants host NCAs two independent non-discriminatory levers that bind **both domestic firms AND incoming EEA passported firms simultaneously**:
1. **MiFIR Article 42 Permanent National Product Interventions**: After [ESMA](/passports/european-securities-and-markets-authority) let its temporary Decision (EU) 2018/796 CFD measures lapse in August 2019 so national authorities could enact **permanent** domestic orders, NCAs went *beyond* ESMA's 30:1 baseline—analyzed in [MiFIR Article 42 National Product Intervention & ESMA Opinions](/bulletins/mifir-article-42-national-product-intervention-esma-opinion-gate)—with Germany banning retail futures additional payment obligations, the Netherlands capping listed Turbos, Poland adding an "Experienced Retail Client" tier, and Spain banning all retail CFD marketing.
2. **Domestic Commercial-Advertising & Telecom Blackout Statutes**: Outside MiFIR's product perimeter, France's **Loi Sapin 2** (Article L. 533-12-7 Code monetaire et financier) regulates *electronic advertising communications* on French territory, while Italy's **Decreto Crescita** (Article 7-octies TUF) empowers CONSOB to instruct Italian telecom ISPs to sinkhole abusive domains within days.

![Cross-border EEA host-state conduct compliance matrix filtering Belgium FSMA bans, France Sapin 2, Spain CNMV 2023, Germany BaFin futures rules, and Italy CONSOB blackouts](/api/figure?type=flow&title=Continental%20European%20Host-State%20Conduct%20Geo-Fencing%20Engine&subtitle=Mandatory%20country-by-country%20product%2C%20leverage%2C%20and%20marketing%20locks%20atop%20an%20EEA%20MiFID%20II%20passport&steps=Belgium%20%28FSMA%202016%29%3A%3A100%25%20prohibition%20on%20OTC%20CFD%20%26%20binary%20retail%20distribution%7CSpain%20%28CNMV%20Jul%202023%29%3A%3AZero%20retail%20CFD%20ads%2C%20CPA%20affiliates%2C%20events%20or%20shirt%20sponsors%7CFrance%20%28AMF%20Sapin%202%29%3A%3ABans%20electronic%20ads%20for%20%3E5%25-margin%20%2F%20non-guaranteed%20CFDs%7CGermany%20%26%20NL%20%28BaFin%2FAFM%29%3A%3ABans%20retail%20futures%20margin%20deficits%20%28DE%29%20%26%20caps%20Turbos%20%28NL%29&metrics=BELGIUM%20OTC%20CFDS%3A%3A0%25%20Permitted%3A%3ARoyal%20Decree%20of%2021%20July%202016%7CSPAIN%20CFD%20ADS%3A%3A100%25%20Banned%3A%3ACNMV%20Resolution%2011%20July%202023%7CITALY%20ISP%20BLOCKS%3A%3A1%2C100%2B%20Domains%3A%3ACONSOB%20Art.%207-octies%20TUF%20orders%7CMIFID%20ART.%2070%20FINE%3A%3AEUR%205M%20%2F%2010%25%3A%3AMinimum%20statutory%20NCA%20fine%20ceiling)

## Master Jurisdiction Comparison: Six Major Continental Supervision Regimes

| EEA Jurisdiction & Dual NCAs | Domestic Prudential & Conduct Statute | Signature National Overlay Beyond ESMA Baseline | Relevant Cluster Deep Dives |
| :--- | :--- | :--- | :--- |
| **Germany** ([BaFin](/competent-authorities/bafin) + Bundesbank) | *WpIG* (prudential) & *WpHG / MaComp* (conduct) | Bans retail **futures** margin-deficit liability (*Nachschusspflicht*); strict MaComp BT 3/13 inducement & target-market audits | [BaFin WpIG Dual Supervision](/bulletins/germany-bafin-wpig-bundesbank-dual-supervision-class-1-2-3-firms) & [BaFin Futures Deficit Ban](/bulletins/bafin-general-administrative-act-cfd-futures-margin-deficit-ban) |
| **France** ([AMF](/competent-authorities/amf) + [ACPR](/competent-authorities/autorit-de-contr-le-prudentiel-et-de-r-solution-france-166)) | *Code monetaire et financier* & *Loi Sapin 2* | Prohibits electronic marketing of binary options & non-stop-loss-guaranteed CFDs (Art. L. 533-12-7 COMOFI) | [AMF Loi Sapin 2 Ad Ban](/bulletins/france-amf-loi-sapin-2-article-l533-12-7-electronic-ad-ban) & [ACPR/AMF EI Licensing](/bulletins/france-acpr-amf-dual-licensing-entreprise-investissement-audit) |
| **Spain** ([CNMV](/competent-authorities/cnmv) + [Banco de Espana](/competent-authorities/bde)) | *Ley 6/2023 LMVSI*, Jul 2023 Resolution & Circ. 1/2022 | **Total ban on retail CFD marketing, call centers, affiliates & sports sponsorships**; handwritten risk-acknowledgement prompts | [CNMV July 2023 CFD Ad Ban](/bulletins/spain-cnmv-july-2023-resolution-cfd-marketing-influencer-ban) & [CNMV Circular 1/2022 Warnings](/bulletins/cnmv-circular-1-2022-high-risk-warning-popups-handwritten-text) |
| **Italy** ([CONSOB](/competent-authorities/consob) + [Banca d'Italia](/competent-authorities/bdi-170)) | *Testo Unico della Finanza (TUF, D.Lgs. 58/1998)* | **Art. 7-octies TUF** rapid ISP DNS/IP blackout of abusive sites; strict SIM dual governance | [CONSOB Art. 7-octies ISP Blackouts](/bulletins/italy-consob-article-7-octies-tuf-decreto-crescita-isp-blackout) & [Italian SIM Supervision](/bulletins/italy-sim-banca-d-italia-consob-supervision-tuf-article-19) |
| **Netherlands** ([AFM](/competent-authorities/afm) + [DNB](/competent-authorities/de-nederlandsche-bank-162)) | *Wet op het financieel toezicht (Wft)* | **AFM Oct 2021 Turbos intervention** (leverage caps, NBP & bonus ban on listed Turbos); RTS 6 HFT market-maker hub | [AFM Turbos & RTS 6 HFT Oversight](/bulletins/netherlands-afm-turbos-leverage-intervention-rts-6-hft-oversight) |
| **Belgium** ([FSMA](/competent-authorities/fsma) + [NBB](/competent-authorities/national-bank-of-belgium-371)) | Royal Decree of 21 July 2016 (*FSMA Reg.*) | **Complete ban on commercializing OTC leveraged CFDs**, rolling spot FX, and binary options to Belgian retail clients | [Belgium FSMA Complete OTC CFD Ban](/bulletins/belgium-fsma-2016-royal-decree-complete-otc-retail-cfd-prohibition) |

## Twin-Peaks vs Single-Regulator Supervision Across Europe

Notice how Continental Europe overwhelmingly favors **Twin-Peaks (Dual-Regulator) architecture** over Cyprus's single-regulator CySEC model:
- In **France**, **Italy**, **Netherlands**, and **Belgium**, a prudential central-bank arm ([ACPR](/competent-authorities/autorit-de-contr-le-prudentiel-et-de-r-solution-france-166), [Banca d'Italia](/competent-authorities/bdi-170), [DNB](/competent-authorities/de-nederlandsche-bank-162), [NBB](/competent-authorities/national-bank-of-belgium-371)) polices IFR/IFD solvency while a market-conduct commission (AMF, CONSOB, AFM, FSMA) polices MiFID II investor protection.
- Even inside "integrated" supervisors like **Germany** ([BaFin](/competent-authorities/bafin) sharing ongoing prudential examination with the **Deutsche Bundesbank** under § 62 WpIG) and **Austria** ([FMA](/competent-authorities/fma-231) alongside the [OeNB](/competent-authorities/oesterreichische-nationalbank-198)), firms undergo separate prudential and conduct inspection teams—whereas smaller domestic regimes like [Austria's WDU tier](/bulletins/austria-fma-wag-2018-wertpapierdienstleistungsunternehmen-wdu-tier), [Poland's KNF framework](/bulletins/poland-knf-experienced-retail-client-cfd-tier-appropriateness-test), [Luxembourg's CSSF Circular 20/758](/bulletins/luxembourg-cssf-circular-20-758-central-administration-substance), [Nordic FI/Finanstilsynet/FIN-FSA](/bulletins/nordic-fi-finanstilsynet-fin-fsa-margin-conduct-aml-enforcement), [CMVM/HCMC](/bulletins/portugal-cmvm-greece-hcmc-tied-agent-affiliate-marketing-audits), and [Baltic BoL/EFSA hubs](/bulletins/baltic-bank-of-lithuania-efsa-fintech-emi-mifid-mica-transition) enforce distinct local substance and affiliate rules.

## Modeling Expected Administrative Sanction & Revenue-Loss Exposure

Under [MiFID II Article 70 Administrative Sanctions](/bulletins/mifid-ii-article-70-administrative-fines-5m-10pct-turnover-audit), breaching a host state's MiFIR Article 42 product intervention or marketing prohibition triggers harmonized statutory fine ceilings of **at least EUR 5,000,000 or 10% of total annual consolidated turnover** (or **2x illicit benefit derived**), plus host-state [Article 86 passport freezes](/bulletins/mifid-ii-article-86-precautionary-powers-host-nca-blocking-2026):

```formula
Host_Country_Conduct_Violation_Exposure (E_sanction_EUR) =
 min_or_statute_max(
 max(EUR_5000000_Statutory_Ceiling_Base * Severity_Factor, 0.10 * Consolidated_Group_Turnover * Severity_Factor),
 2.0 * Disgorged_Gross_Host_Country_Revenue
 ) + Client_Loss_Restitution_EUR + Host_Passport_Suspension_NPV_Loss

Compliant_GeoFenced_Product_Eligibility_Boolean (Country_c, Client_i, Product_p):
 Allow_Trade = Passport_Active(c, p)
 AND NOT (c == 'BE' AND Is_OTC_Leveraged_CFD(p) AND Is_Retail(i))
 AND NOT (c == 'DE' AND Has_Additional_Margin_Liability(p) AND Is_Retail(i))
 AND (If c == 'ES' AND Is_Retail_CFD(p): Zero_Active_Marketing_Or_Affiliate_Origin(i))

Worked Cross-Border Enforcement Cost Comparison (CNMV / AMF Marketing & Affiliate Audit):
 Consolidated Broker Group Annual Turnover = EUR 68,000,000 (10% statutory ceiling = EUR 6,800,000)
 Illicit Affiliate-Acquired Spanish Retail CFD Revenue Over 9 Months = EUR 1,450,000
 Calibrated Serious Infringement Fine (LMVSI Art. 302 / MiFID Art. 70) = EUR 2,000,000 + Public Naming Order
 18-Month Suspended Host Onboarding Opportunity Cost = EUR 2,600,000 -> Total Impact = EUR 4,600,000!
```

![Comparison of national retail derivative restrictions and maximum MiFID II Article 70 administrative fine ceilings across six EU states](/api/figure?type=bars&title=National%20Derivative%20Intervention%20Strictness%20%26%20Fine%20Ceilings&subtitle=Comparing%20OTC%20CFD%20bans%2C%20ad%20prohibitions%2C%20listed%20Turbo%20caps%2C%20and%20Art.%2070%20turnover%20penalties&steps=Belgium%20FSMA%20Ban%3A%3A100%25%20retail%20OTC%20CFD%20distribution%20ban%20since%20Aug%202016%7CSpain%20CNMV%202023%3A%3A100%25%20retail%20CFD%20ad%2C%20affiliate%20%26%20sponsorship%20ban%7CFrance%20AMF%20Sapin%202%3A%3AElectronic%20ad%20ban%20unless%20intrinsic%20guaranteed%20stop-loss%7CGermany%20%26%20NL%20Caps%3A%3AFutures%20deficit%20ban%20%28BaFin%29%20%2B%20Listed%20Turbo%20caps%20%28AFM%29&metrics=CORPORATE%20FINE%20CAP%3A%3A%3E%3D%20EUR%205M%20%2F%2010%25%3A%3AMiFID%20II%20Art.%2070%286%29%28f%29-%28g%29%7CNATURAL%20PERSON%20CAP%3A%3A%3E%3D%20EUR%205%2C000%2C000%3A%3ABoard%20%26%20compliance%20executives%7CPROFIT%20DISGORGEMENT%3A%3A%3E%3D%202.0x%20Benefit%3A%3AMiFID%20II%20Art.%2070%286%29%28h%29%20floor%7CPUBLIC%20NAMING%20RULE%3A%3A5-Year%20Archive%3A%3AMiFID%20II%20Art.%2071%20NCA%20register)

## Building Automated Country-Rule Geo-Fencing Engines in Multi-Asset CRMs

Leading pan-European brokers never rely on manual sales-desk training to honor 27+ divergent national interventions. Instead, engineering teams bind **tax-residency ISO codes, billing IBAN prefixes, and IP geolocation** directly to a deterministic product-permission matrix: disabling OTC CFD account opening completely for +32 / BE residents, stripping all referral/affiliate tracking links and promotional banners on .es / +34 Spanish funnels, enforcing guaranteed per-account zero-deficit floors on listed Eurex futures for +49 / DE German retail traders, and routing Dutch retail Turbo orders strictly within [AFM's October 2021 leverage ceilings](/bulletins/netherlands-afm-turbos-leverage-intervention-rts-6-hft-oversight).

## Frequently asked questions

### Why do permanent national CFD rules apply to foreign CySEC or BaFin brokers passporting into Spain or Belgium?

MiFIR Article 42 explicitly empowers a national competent authority to prohibit or restrict the marketing, distribution, or sale of financial instruments "in or from that Member State"—binding every firm touching residents of that host state regardless of where its home MiFID license sits.

### Why did ESMA let its EU-wide retail CFD intervention expire in August 2019?

Under MiFIR Article 40(6), ESMA’s temporary product-intervention powers must be renewed every 3 months as an interim bridge; once almost all 30 EEA national competent authorities enacted permanent domestic Article 42 measures matching or exceeding ESMA’s baseline, ESMA allowed the temporary bridge to lapse.

### Can a French or Spanish football club display a jersey sponsorship from an EEA-licensed retail CFD broker?

In Spain, CNMV’s 11 July 2023 Resolution explicitly prohibits event and sports-club brand sponsorships by entities predominantly marketing CFDs to retail investors unless strict non-CFD ring-fencing applies; France’s Loi Sapin 2 similarly bans sports sponsorships promoting prohibited high-risk contracts.

### What is the minimum maximum fine every EU member state must write into law for MiFID II conduct violations?

Under MiFID II Article 70(6)(f)-(h), every member state must empower its NCA to levy administrative fines of at least EUR 5,000,000 on natural persons and at least EUR 5,000,000 or 10% of total annual consolidated group turnover (or 2x benefit gained) on legal entities.


## Source URLs

- https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32014R0600
- https://www.esma.europa.eu/esmas-activities/investors-and-issuers/investor-protection/product-intervention
- https://www.bafin.de/EN/Aufsicht/BoersenMaerkte/Produktintervention/produktintervention_node_en.html
- https://www.cnmv.es/portal/verDoc.axd?t=%7Bcfds-resolution-2023%7D

## Citation

- APA: Lukas Lindqvist, CEFA. (2026). BaFin WpIG, AMF Sapin 2, CNMV & CONSOB National Conduct Interventions Guide. Euro Firm Ledger. https://eurofirmledger.com/bulletins/bafin-wpig-amf-sapin-2-cnmv-consob-conduct-interventions-2026
- Canonical article: [BaFin WpIG, AMF Sapin 2, CNMV & CONSOB National Conduct Interventions Guide](https://eurofirmledger.com/bulletins/bafin-wpig-amf-sapin-2-cnmv-consob-conduct-interventions-2026)
- Site research index: [Euro Firm Ledger](https://eurofirmledger.com/llms-full.txt)