Asylum-seekers queue outside the State Office of Health and Social Affairs (LAGeSo) registration centre in Berlin on December 29, 2015.
JOHN MACDOUGALL/AFP via Getty Images
When a woman a German digital-rights outlet identifies as Inga — a physician who fled to Germany and now lives with her daughter in a container camp in an east German town — tried to buy a small bunch of grapes at the local supermarket, she stood at the checkout in silence, waiting to find out whether her state-issued payment card would work. It had failed before. She had left shops empty-handed before. “Hopefully it goes well this time,” she said, in German, before walking in. The grapes cost €1.79 (approximately $2.07 USD). She had €2 (approximately $2.31 USD) left on the card for the rest of the month.
Inga’s checkout anxiety, documented by German digital-rights outlet netzpolitik.org in a same-day investigation, is the entry point into a much larger story: a government-mandated fintech infrastructure that routes the daily financial lives of approximately 200,000 asylum seekers in Germany through state-accessible transaction ledgers — and whose privacy architecture a state data protection authority has found to violate the General Data Protection Regulation.
Germany’s Bezahlkarte (payment card) system, now operating across all 16 federal states following Berlin’s SocialCard launch on August 13, was designed to replace cash welfare payments with a restricted prepaid debit card that prevents asylum seekers from making bank transfers — the stated rationale being to stop potential remittances to people smugglers or family abroad. What it has produced, critics and an independent data protection authority argue, is something considerably more concerning: a financial surveillance architecture with no lawful basis under European data protection law, and a mandatory disclosure process that forces asylum seekers to reveal the identity of their lawyers to the very authorities deciding their asylum cases.
What the Card Does — and What It Cannot Do
The Bezahlkarte is an open-loop prepaid Visa debit card loaded monthly with asylum benefits under Germany’s Asylbewerberleistungsgesetz (Asylum Seekers’ Benefits Act), whose amendment enabling the card entered into force on May 16, 2024. Its legal basis was anchored in parliament that April; by January 2025, almost all of Germany’s 16 states had completed their rollouts, with Berlin completing the nationwide picture four days ago.
The card’s restrictions are extensive. Cash withdrawals are capped at €50 per month in 13 states (approximately $58 USD). Bank transfers are blocked as a default. Online purchases are generally disabled. Geographic restrictions prevent card use outside approved postcodes in some states. Many small shops, market stalls, and businesses that do not accept standard Visa card payments — a substantial fraction of Germany’s still-cash-heavy retail landscape — cannot accept the card at all. The local Tafel food bank does not accept it. Neither do some pharmacies. When merchants do accept it, some levy a surcharge.
For Inga, who receives approximately €750 monthly (approximately $869 USD) for herself and her child, these restrictions compound across every dimension of daily life. She cannot purchase secondhand children’s goods through classified listings. She cannot pay the nursery fees that accept only cash. She cannot subscribe to Germany’s subsidized national rail pass, the Deutschlandticket, via direct debit. When she tries to use the in-app “Transfer” button, the app logs her out without processing anything.
Prepaid Cards as Surveillance Architecture: How the Data Flows
The Bezahlkarte’s fintech architecture is worth examining precisely because it is technically mundane — and therefore easy to overlook as a surveillance mechanism.
Unlike a conventional bank account, the Bezahlkarte operates through a multi-party structure: transactions flow through (1) the merchant’s point-of-sale terminal to (2) the Visa payment network to (3) a private bank acting as issuing bank under contract to (4) the local public authority that administers the card program. This last step is the structurally significant one. The local Sozialamt or Landesamt — the same office that determines asylum benefits and, in many cases, has contact with the immigration authority deciding the cardholder’s case — functions as the card’s program manager. It controls what gets loaded onto the card and, through the whitelist system, what the card can pay for.
Every transaction — every grape purchase, every bus fare, every pharmacy visit — generates a record accessible to this authority. For asylum seekers who came from countries where state monitoring of financial behavior carried direct legal and personal risk, this architecture is not merely inconvenient. Sociologist Alexandra Keiner, a doctoral researcher at Berlin’s Weizenbaum Institute who studies the Bezahlkarte’s effects on migrant populations, told netzpolitik.org that cardholders fear transaction scrutiny — a persistent, low-level concern that their payments could be used against their asylum cases — a fear the data architecture of the system does nothing to structurally address.
This pattern is not unique to Germany. A 2024 study published in the Journal of Ethnic and Migration Studies by Sophie Bennani-Taylor of Oxford’s Internet Institute and Nasar Meer of the University of Glasgow examined the UK’s equivalent system — the ASPEN card issued to asylum seekers by the UK Home Office — and found that prepayment technology “enacts alterity”: it co-constructs asylum seekers as subjects requiring behavioral management while positioning the issuing authority as protective. The research found that asylum seekers reported fear of buying the “wrong” thing and described the card’s surveillance capabilities as a form of control that permeated daily life. The same technology — first deployed in UNHCR’s Greece program by Prepaid Financial Services — migrated into UK state asylum policy and, in different implementations, into Germany’s.
When Applying for a Transfer Reveals That You Have a Lawyer
The most specific legal problem identified by Germany’s data protection authorities concerns the whitelist system — the mechanism several states, including Bavaria, introduced as a supposed solution to the transfer blockade.
Because transfers from the Bezahlkarte are blocked by default, cardholders who need to pay a standing obligation — a phone contract, a rail pass, a sports club membership, a lawyer’s fee — can apply to have that specific recipient manually approved by the benefits authority. The application requires supporting documentation: an invoice, a membership confirmation, an appointment letter.
Brandenburg’s data protection commissioner, Dagmar Hartge, whose office assessed the whitelist mechanism in its annual report for 2024 (published in May 2025), concluded that this documentation process involves personal data processing that is neither necessary for providing benefits nor, therefore, lawful.
Her office’s critique went further than a procedural objection. Under the EU’s General Data Protection Regulation, public authorities cannot invoke the “legitimate interests” basis for processing personal data — GDPR Article 6(1)(f) explicitly bars this for state bodies. That leaves a public authority needing to demonstrate that the specific processing is necessary for a legal obligation or a public task. The LDA found that no such necessity applied to the whitelist’s data collection: the authority does not need to know what a cardholder is paying for, or to whom, in order to disburse welfare benefits.
But it is the attorney problem that crystallizes the system’s deepest structural flaw. When an asylum seeker applies to whitelist a lawyer, the supporting documentation reveals — before any legal consultation has taken place — that the cardholder is planning to take legal action against the benefits authority or the immigration authority. Keiner described the dynamic precisely: “If the person is, say, a lawyer, the authority already knows you’re planning to take legal action against them before you’ve even received advice.”
This is not a theoretical risk. It is an architectural feature of the whitelist system: the application for transfer approval is processed by the same institutional apparatus that determines the cardholder’s benefits and, in many cases, interacts with the authority deciding their right to remain. The chilling effect on the right to legal counsel — a right guaranteed under German and European law — is structural, not incidental, to the whitelist mechanism’s design. The Brandenburg DPA ruled processing impermissible.
What the Card Actually Costs to Operate — and Whom It Costs
The Bezahlkarte was introduced partly on administrative-efficiency grounds: cash disbursements required in-person appointments and significant staff time. Steffen Weickert, president of Berlin’s refugee authority administering the new SocialCard, cited exactly this rationale when announcing the August 13 launch.
But the initiative Nein zur Bezahlkarte — one of the civil society organizations coordinating the voucher-swap events that Inga relies on to convert her card balance into usable cash — has published analyses arguing that the whitelist approval process, dispute resolution, and additional support burden created when cardholders cannot access basic services generate substantial administrative overhead that the cash-disbursement frame omits. The Institute for Employment Research (IAB), Germany’s leading labor market research body, has published a Bezahlkarte impact assessment finding that restrictions on mobility — the card’s geographic constraints and transfer blockades — impede integration more broadly, hampering job-hunting, access to training, and social participation. Research consistently links social participation to faster labor market entry; the card’s design works against the conditions that Germany’s own researchers identify as enabling refugee employment.
The integration cost is visible in Inga’s life. Before she can pay her phone bill each month — a prerequisite for job applications and language course registration — she must buy gift vouchers at a pharmacy or supermarket, travel by train to Berlin, attend a community voucher-swap event run by volunteers, convert the vouchers to cash, travel to her bank, and deposit the cash in person. “It’s like a second job,” she told netzpolitik.org’s reporter Martin Schwarzbeck, who accompanied her through the process. “I wanted to focus on learning German.” She is a qualified physician. She wants to work as a carer. Instead, a meaningful fraction of her month is spent working around a payment infrastructure.
Does It Stop Remittances?
The stated rationale for the transfer blockade is preventing asylum seekers from sending state benefits abroad — to family members, or potentially to the people-smuggling networks that facilitate migration. Inga’s assessment of that logic was direct: it would require money to be left over at the end of the month. At approximately €750 (approximately $869 USD) per month for a parent and child, with careful budgeting, she said less than €50 (approximately $58 USD) typically remains — an amount she cannot transfer even if the system permitted it.
The economic paradox was identified in research on the UK’s parallel system: asylum seekers receiving subsistence-level benefits have very little left over to remit. The anti-smuggling argument presupposes a financial surplus that subsistence allowances structurally prevent. The Bezahlkarte’s design addresses a risk profile that the benefit level itself largely forecloses.
Courts Have Begun to Push Back
Germany’s civil liberties litigation organization, the Gesellschaft für Freiheitsrechte (GFF), alongside pro-refugee advocacy group PRO ASYL, has brought cases challenging the Bezahlkarte’s restrictions in Hamburg, Chemnitz, and Dresden.
In July 2024, the Hamburg Social Court ruled that applying a flat €50 (approximately $58 USD) monthly cash limit without assessing the individual circumstances of affected people was unlawful. The court awarded the family €270 monthly (approximately $313 USD) as an adequate cash amount, citing in particular the recognized additional needs of the family, which included a pregnant woman. The Hamburg State Social Court, in September 2024, declined to rule on the overall legality of the card system itself, referring the broader question to lengthy main proceedings — leaving the system’s fundamental lawfulness unresolved at the appellate level.
GFF filed a further case before the Chemnitz Social Court in December 2024 and another before the Dresden Social Court in January 2025. The Chemnitz case concerns a family that received a card without any individual needs assessment; after GFF’s intervention, the children’s cash amount was increased and the family received more than one card (the card is not transferable between household members).
The Federal Constitutional Court of Germany has repeatedly affirmed that the right to a dignified minimum standard of living is unconditional and applies to every person on German soil regardless of immigration status. The pending cases will test whether the Bezahlkarte’s restrictions — including geographic limits, transfer blockades, and online purchase disabling — can be squared with that constitutional guarantee.
What Happens to the Data If the Card Provider Changes Hands
The Brandenburg DPA’s assessment flagged a data architecture concern beyond the whitelist problem. The current system routes all cardholder data through a single private bank acting as program manager under contract to multiple local authorities. German data protection law does not currently provide explicit provisions preventing the bank from cross-referencing data sets between different authorities’ mandates — a gap that becomes structurally significant if the private provider’s corporate structure changes, if the service contract is re-tendered, or if the provider is acquired.
The consolidation of a 200,000-person financial behavior dataset at a single private provider, accessible to multiple public authorities, is the quiet architectural risk that the political debate over cash limits and remittances consistently leaves unexamined. The LDA’s concern is not hypothetical: it reflects the documented history of humanitarian fintech migrating from one institutional context to another while carrying its surveillance architecture intact — a pattern Bennani-Taylor and Meer identified in their study of how prepaid technology moved from UNHCR Greece programs into the UK Home Office asylum system.
Does Government Rationale Hold Up?
German state governments defend the Bezahlkarte on three grounds: preventing remittances to smugglers, reducing administrative burden on staff, and creating a standardized benefits disbursement system across 16 states with previously inconsistent practices. All three rationales have been challenged by evidence accumulated since rollout.
The remittance-prevention argument is economically questionable at subsistence benefit levels (see above). The administrative-burden argument is disputed by civil society analyses showing the whitelist approval process, dispute resolution, and workaround-facilitation generate substantial compensating overhead. The standardization argument is undercut by the evidence that outcomes vary significantly across states — cash limits, geographic restrictions, and online-payment permissions differ enough that the “system” is in practice a patchwork of 16 different implementations, some significantly more restrictive than others.
The Brandenburg DPA addressed the most fundamental rationale directly: it stated its office did not regard it as the role of a welfare authority to influence how beneficiaries spend their money through restrictions and selective approvals. The legal conclusion follows from that principle — if the authority should not be influencing spending, it has no need to know what the cardholder is paying for, and therefore no valid legal basis for processing the data involved in knowing.
Currency conversions in this article are based on an exchange rate of approximately $1.16 USD per euro as of August 17, 2026; conversions are approximate.
Frequently Asked QuestionsWhat is Germany’s Bezahlkarte and who does it affect?
Germany’s Bezahlkarte — literally “payment card” — is a state-issued prepaid Visa debit card that replaces cash welfare payments for asylum seekers under Germany’s Asylum Seekers’ Benefits Act. It became legal in May 2024 and has been rolled out across all 16 German states, with Berlin completing the final adoption on August 13, 2026. Approximately 200,000 people are affected. The card blocks bank transfers by default, caps cash withdrawals at €50 (approximately $58 USD) per month in most states, and disables online purchases, geographic mobility, and direct-debit arrangements that Germans without the card take for granted.
Is Germany’s asylum payment card legal under GDPR?
The card’s core architecture has not yet been ruled unlawful by a court. But the specific whitelist mechanism — the process through which cardholders apply to unlock individual payment recipients — has been assessed by Brandenburg’s data protection commissioner as involving data processing for which no valid GDPR lawful basis exists. Under GDPR Article 6, every personal data processing activity must have a lawful basis; public authorities cannot invoke the “legitimate interests” ground available to private entities, and the Brandenburg DPA found no other applicable basis for the whitelist’s data collection. Whether the broader card system is lawful under Germany’s constitutional guarantee of a dignified minimum subsistence level is currently before social courts in Hamburg, Chemnitz, and Dresden, with no final ruling at the appellate level yet.
Why can’t asylum seekers in Germany make bank transfers with the card?
Bank transfers are blocked as a default feature of the Bezahlkarte’s product parameters — enforced at the authorization level by the issuing bank at the public authority’s direction. The stated rationale is preventing asylum seekers from sending state benefits abroad to family members or to people-smuggling networks. Critics, including researchers at the IAB (Germany’s Institute for Employment Research) and the Weizenbaum Institute, note that this restriction blocks legitimate essential payments — phone contracts, rail passes, legal fees, nursery fees — and imposes a significant workaround burden on people who need those services to find work and integrate. The Brandenburg DPA found that the whitelist process introduced to address this blockade creates its own, more serious GDPR problem by requiring cardholders to disclose their legal and personal affairs to the benefits authority.
Does applying to whitelist a lawyer really reveal your plans to sue the authority?
Yes, structurally. The whitelist application requires supporting documentation — for a lawyer, that means a letter of engagement, an invoice, or an appointment confirmation identifying the attorney by name. That application is processed by the benefits authority or an institution connected to it. Sociologist Alexandra Keiner of the Weizenbaum Institute, who researches the Bezahlkarte’s effects on migrants, explained the dynamic: “The authority already knows you’re planning to take legal action against them before you’ve even received advice.” Germany’s Brandenburg data protection commissioner found this processing unlawful. The chilling effect on the right to legal counsel — for a population whose legal status is actively being decided by the state — is an architectural feature of the whitelist system, not an accident.