Luxembourg
Overview
The Law of 12 November 2004 is Luxembourg’s central AML/CFT preventive statute, supplemented by CSSF regulations, EU instruments and sector legislation. On 24 September 2026 Luxembourg finalised its first vertical risk assessment on international financial sanctions related to terrorist financing and proliferation financing, adding dedicated sanctions-risk context to the current framework.
Luxembourg operates the Register of Beneficial Owners (RBE) under the 2019 framework and a separate register architecture for fiducies and trusts under the 2020 law.
Professionals within scope of the 2004 law must conduct CDD and report suspicious activity through the national FIU framework. CSSF rules and guidance operationalise these requirements for supervised financial institutions.
Compliance Calendar2
Requirement
Suspicious activity / transaction report to CRF
Authority / Report toCellule de renseignement financier (CRF Luxembourg)
Deadline / triggerWithout delay. CSSF guidance reiterates prompt reporting to the CRF when doubt persists.
Requirement
- Subject scope
- Professionals subject to the Law of 12 November 2004, subject to sector scope and exemptions.
- Trigger
- Knowledge, suspicion or reasonable grounds to suspect money laundering, associated predicate offences, terrorist financing or relevant suspicious activity under the law.
- Filing channel
- goAML / CRF electronic reporting route and CRF-prescribed report forms or report types.
Impact
- Consequences of non-compliance
- Failure to report or reporting deficiencies may lead to criminal, administrative or supervisory sanctions depending on the provision and professional category.
- Enforcement authority
- CRF receives reports; CSSF and other competent supervisors enforce sector compliance.
- Operational impact
- Internal escalation should allow the responsible function to complete the preliminary assessment and report without avoidable delay.
Requirement
Professional ML/TF risk assessment, policies and controls
Authority / Report toRelevant competent supervisory authority; CSSF for entities within its perimeter
Deadline / triggerOngoing; risk assessment and AML/CFT control framework must remain current and proportionate. No universal filing date is asserted.
Requirement
- Subject scope
- Professionals within the 2004 Law, with sector-specific CSSF or other supervisory rules layered on where applicable.
- Trigger
- Continuous business activity and changes in institutional/customer/product/geographic risk.
Impact
- Consequences of non-compliance
- Deficiencies may result in supervisory remediation, administrative sanctions or other measures depending on legal basis and regulated status.
- Enforcement authority
- CSSF or other competent supervisory authority.
- Operational impact
- Keep the enterprise risk assessment and control architecture aligned to actual exposure and supervisory expectations.
Authorities & FIU5
FATF Assessment
Measures how fully the jurisdiction has implemented FATF’s technical requirements. It does not measure practical effectiveness.
Measures whether the AML/CFT system achieves its intended results in practice. Follow-up reports do not normally replace these ratings.
Explore 40 FATF RecommendationsSee every Technical Compliance rating and what it means.+
Explore 11 Immediate OutcomesSee how FATF rates whether the AML/CFT system works in practice.+
Regulatory Timeline44
On 12 October 2026 Luxembourg published an updated national risk assessment of terrorist financing. The CSSF official announcement attributes the communiqué to the Ministry of Justice and links to the 2026 national TF risk assessment. This is a new risk-assessment publication, not a new statutory obligation; the summary does not assert findings not independently extracted from the report.
Luxembourg’s Ministry of Finance announced on 24 September 2026 the completion of the country’s first vertical risk assessment on international financial sanctions related to terrorist financing and proliferation financing; CSSF carries the official publication within its sanctions and AML/CFT materials.
The legacy VASP registration transition ran to 1 July 2026, after which market access is governed by the MiCAR authorisation framework. This distinguishes transitional registration from the current CASP licensing architecture.
FATF revised Recommendation 16 to standardise payment information and strengthen fraud/error controls in cross-border payments.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗FATF amended Recommendation 1 and related interpretive material to strengthen proportionality and simplified measures under the risk-based approach.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗A Luxembourg law published and effective on 10 February 2025 designated the CSSF as the national competent authority for MiCAR. This identifies the current CASP supervisory architecture rather than treating the EU regulation as automatic national implementation detail.
Luxembourg’s AML/CFT framework incorporates directly applicable EU transfer-of-funds requirements relevant to crypto transfers from 30 December 2024.
FATF revised Recommendations 4, 30, 31 and 38 and related interpretive material to make asset recovery a stronger operational priority, expand tools to trace and confiscate criminal property and improve domestic and international cooperation.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗At its February 2023 Plenary FATF revised Recommendation 25 and its Interpretive Note to strengthen transparency and beneficial-ownership requirements for trusts and similar legal arrangements, complementing the 2022 strengthening of Recommendation 24 for legal persons.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗FATF strengthened Recommendation 24 on beneficial ownership transparency for legal persons.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗The national legal basis supports implementation, supervision and enforcement of international financial restrictive measures.
FATF amended Recommendations 1 and 2 and their Interpretive Notes so countries and covered private-sector entities must identify, assess and mitigate risks of breaches, non-implementation or evasion of proliferation-related targeted financial sanctions.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗The 2020 framework extends beneficial-ownership transparency architecture to relevant fiduciary arrangements and trusts.
The Basel Committee revised its ML/TF risk-management guidelines to add principles for information exchange and cooperation between prudential and AML/CFT supervisors in authorisation, ongoing supervision and enforcement.
A Basel supervisory publication does not become domestic law merely because it is GLOBAL. National adoption, supervisory use or incorporation must be evidenced by a LOCAL milestone or source.
Basel Committee on Banking Supervision ↗FATF adopted detailed implementation requirements for virtual assets and VASPs in June 2019, including the application of wire-transfer information requirements commonly described as the Travel Rule. This operationalised the virtual-asset perimeter introduced through the 2018 Recommendation 15 revision.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗Entities in scope begin operating under the central RBE filing and access framework.
Luxembourg creates the RBE framework for central beneficial ownership information.
In October 2018 FATF revised Recommendation 15 and added the definitions of virtual asset and virtual asset service provider, formally bringing virtual-asset activity into the global AML/CFT standards architecture. Detailed implementation requirements followed in 2019.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗The Basel Committee issued Sound management of risks related to money laundering and financing of terrorism, superseding its 2001 CDD and 2004 consolidated KYC papers and integrating ML/TF risk management with prudential supervisory expectations.
A Basel supervisory publication does not become domestic law merely because it is GLOBAL. National adoption, supervisory use or incorporation must be evidenced by a LOCAL milestone or source.
Basel Committee on Banking Supervision ↗FATF adopted a consolidated revised set of 40 Recommendations integrating AML, CFT and proliferation-financing safeguards.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗Resolution 1737 imposed binding measures concerning Iran’s proliferation-sensitive nuclear activities, including an asset freeze on designated individuals and entities. Together with the DPRK regime, it forms a foundational UN counter-proliferation targeted-financial-sanctions architecture.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗Following the DPRK nuclear test, Resolution 1718 imposed binding sanctions including an asset freeze on designated persons and entities connected to the nuclear programme. It became a central UN targeted-financial-sanctions pillar for counter-proliferation financing.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗The law forms the core statutory basis for professional obligations, CDD, reporting and AML/CFT controls in Luxembourg.
FATF added a ninth Special Recommendation addressing cash couriers and cross-border movement of currency.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗Resolution 1540 requires all States to adopt and enforce laws and domestic controls to prevent non-State actors from acquiring or using weapons of mass destruction and related materials. It forms a binding global legal pillar of the proliferation-financing control environment later reflected in FATF CPF standards.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗The UN General Assembly adopted the United Nations Convention against Corruption on 31 October 2003. UNCAC addresses prevention of money laundering, laundering of corruption proceeds, confiscation and a dedicated asset-recovery framework; the Convention entered into force globally on 14 December 2005.
Current UN depositary relationship to 2003 UN Convention against Corruption. This is not a claim that the jurisdiction was already a Party on the GLOBAL event date; the national accession/ratification date is a separate LOCAL/STATUS fact.
UN Treaty Collection ↗FATF comprehensively revised its AML/CFT Recommendations, strengthening preventive measures and extending coverage.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗The Basel Committee issued Customer due diligence for banks, setting minimum supervisory expectations for customer acceptance, identification, ongoing monitoring and risk management. It became an influential global banking KYC/CDD benchmark and was later reflected in FATF standards.
A Basel supervisory publication does not become domestic law merely because it is GLOBAL. National adoption, supervisory use or incorporation must be evidenced by a LOCAL milestone or source.
Basel Committee on Banking Supervision ↗FATF expanded its standards to terrorist financing through eight Special Recommendations.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗Resolution 1373 requires all States to prevent and suppress terrorist financing, criminalise the provision or collection of funds for terrorist acts, freeze terrorist assets without delay and prohibit making funds or financial services available to terrorists and related entities.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗The Palermo Convention was adopted on 15 November 2000 and broadened the international money-laundering framework beyond drug proceeds through criminalisation and preventive measures tied to transnational organised crime. It entered into force globally on 29 September 2003.
Current UN depositary relationship to 2000 Palermo Convention. This is not a claim that the jurisdiction was already a Party on the GLOBAL event date; the national accession/ratification date is a separate LOCAL/STATUS fact.
UN Treaty Collection ↗The UN General Assembly adopted the International Convention for the Suppression of the Financing of Terrorism on 9 December 1999, creating the treaty framework for criminalising terrorist financing and international cooperation. It entered into force globally on 10 April 2002.
Current UN depositary relationship to 1999 Terrorist Financing Convention. This is not a claim that the jurisdiction was already a Party on the GLOBAL event date; the national accession/ratification date is a separate LOCAL/STATUS fact.
UN Treaty Collection ↗Resolution 1267 imposed an assets freeze and other targeted sanctions in the Taliban context and created the Security Council committee that became the foundation of the UN 1267 sanctions architecture. It is a key global precursor to modern terrorist-financing targeted financial sanctions.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗The Law of 11 August 1998 introduced criminal organisations and money laundering into the Penal Code, broadening the criminal-law framework beyond the earlier drug-proceeds model.
FATF revised the Forty Recommendations to reflect evolving money-laundering methods and countermeasures.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗Representatives of 13 financial intelligence units met in Brussels on 9 June 1995 and founded what became the Egmont Group. The milestone created the operational global network for FIU-to-FIU cooperation and exchange of financial intelligence.
Current profile relationship to the Egmont network. This does not imply membership in 1995; admission history is a separate LOCAL/STATUS fact.
Egmont Group · Member FIUs ↗Historical FinCEN/GAO membership evidence identifies Luxembourg among the 14 first Egmont Group members; Egmont's official history dates the founding meeting to 9 June 1995.
Luxembourg transposed the First AML Directive in 1993, materially broadening and formalising its preventive AML framework. This national implementation milestone is included without duplicating the EU supranational directive itself.
FATF issued its original Forty Recommendations, establishing the first global AML standard framework.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗FATF records Luxembourg as a member since 1990.
The law of 7 July 1989 introduced money laundering of drug-trafficking proceeds as a specific offence, while the financial-sector supervisory framework also developed preventive rules. This pushes Luxembourg’s AML origin back well before the 2004 consolidated statute.
The G7 established FATF in 1989 to examine and develop measures to combat money laundering. FATF became the central global standard-setting body whose recommendations are implemented through national and regional AML/CFT frameworks.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗The Vienna Convention was adopted on 20 December 1988 and created the first treaty-level international obligation to criminalise laundering conduct linked to drug-trafficking proceeds, alongside confiscation and international-cooperation measures. It entered into force globally on 11 November 1990.
Current UN depositary relationship to 1988 Vienna Convention. This is not a claim that the jurisdiction was already a Party on the GLOBAL event date; the national accession/ratification date is a separate LOCAL/STATUS fact.
UN Treaty Collection ↗The Basel Committee published a Statement of Principles for banks aimed at reducing the risk that banking institutions would be used by criminals or as channels for money laundering. This helped establish the preventive and supervisory side of AML alongside the emerging criminal-law framework.
A Basel supervisory publication does not become domestic law merely because it is GLOBAL. National adoption, supervisory use or incorporation must be evidenced by a LOCAL milestone or source.
Basel Committee on Banking Supervision ↗