If Germany’s Payment Services Supervision Act applies to ‘buying’ Lufthansa’s miles using points in another program, then they aren’t currently in compliance with the Act, in part because ‘e-payments’ are now regulated as traditional payment services. That means registration, government supervision, and “strong customer authentication” among other requirements.