WPK attacks customs bill secrecy gap as goAML adds TOTP login

The auditors' chamber is fighting a two-front autumn: unequal secrecy protection in the government's customs billWPK, and a new login method for the anti-money-laundering portal. The WPK's "Neu auf WPK.de" index of 28 October 2026 carries both items, each published as its own notice that day.

In a letter of 23 October 2026 the chamber comments on the government's draft actWPK for greater justice through a stronger customs administration and combating financial crime, now before the Bundestag committees. It objects that, once again, a bill treats Wirtschaftsprüfer and vereidigte Buchprüfer worse than lawyers and chamber legal counsel in protecting professional secrecyWPK.

The first complaint concerns section 57(2) and (3) of the draft ZollfahndungsdienstgesetzWPK, introduced by article 2. The provision gives customs authorities comprehensive powers to clarify the origin of significant assets where factual indications suggest they are not of lawful originWPK: they may demand information and documents from individuals, companies, partnerships and public bodies that can usefully contribute to the examined matters. Through section 57(3) sentence 3, section 9(3) of the act applies accordingly, breaking the auditors' right to refuse information where disclosure is needed to avert danger to the existence or security of the Federation or a Land, or to a person's life, limb or libertyWPK. The refusal right of lawyers and chamber counsel survives even in those casesWPK. The chamber calls for uniform protection.

The second complaint concerns section 2 of the draft SanktionsdurchsetzungsgesetzWPK, introduced by article 15, which provides no refusal rights or exceptions for privilege holders at allWPK. That provision equips the Generalzolldirektion with broad powers to trace funds and economic resourcesWPK: demanding information and documents including electronically stored data, summoning and examining individuals, and entering and searching business premises during normal hours. The chamber proposes adding privilege exceptions.

The draft more generally modernises the customs administration's structure, merging the investigation service and the sanctions-enforcement unit with the rest of the directorate and the main customs offices, creating specialised units for complex international money-laundering cases at local level, strengthening powers against international laundering and organised crime in line with FATF recommendations, and improving transparency-register data quality.

Separately, time-based one-time passwords become available for goAML login on 9 November 2026WPK. TOTP codes expire within a short preset time, adding security. The existing one-time-password method — a verification code sent after login with username and password — remains availableWPK, but the FIU recommends switching to TOTPWPK. Users need an authenticator app with TOTP support or two-factor hardwareWPK. Details are on the customs website, with a registration tutorial for obliged entities.

Legal basis is the Regierungsentwurf eines Gesetzes für mehr Gerechtigkeit durch die Stärkung der Zollverwaltung und die Bekämpfung der Finanzkriminalität (Bundestag committees) commented by WPK letter of 23 October 2026, and the WPK goAML notice of 28 October 2026.