AML / Financial Crime regulatory updates from Luxembourg.
We track 161 AML / Financial Crime updates from Luxembourg regulators, published by CSSF. The archive covers 65 warnings, 64 news items and 16 enforcement actions. Most recent update: September 2026. Coverage runs from 2020 to 2026.
No description available.
Why this matters
The CSSF warning concerns identity theft and fraudulent misuse of Triton Lux SCS's name via a spoofed website and email domain. While the warning is issued by a financial regulator and targets financial sector participants, it is a standard protective notice about a specific fraud scheme rather than a binding...
No description available.
Why this matters
The CSSF warning concerns identity theft and fraudulent misuse of CYCLOPE INVESTISSEMENTS' name via a spoofed website, email, and phone numbers. The legitimate firm is a specialised investment fund under Luxembourg law.
No description available.
Why this matters
This is a regulatory warning issued by CSSF concerning identity theft and fraudulent misuse of Permira Management S.à r.l.'s name. Unknown persons are impersonating the legitimate, authorized alternative investment fund manager through fake contact channels (email, phone numbers) and fraudulent platforms (PHLmax,...
No description available.
Why this matters
This is a consumer protection alert issued by CSSF (Commission de Surveillance du Secteur Financier) warning of identity theft and fraudulent activities conducted under the name of Axxion S.A., a legitimate alternative investment fund manager.
No description available.
Why this matters
This is an update to an existing statement (originally 30 August 2024, updated 11 September 2026) clarifying the data controller arrangement between CSSF and EBA for the EuReCA AML/CFT database in light of the new AMLA regulation (EU 2024/1620).
No description available.
Why this matters
The CSSF warning concerns identity theft and fraudulent misuse of Quintet Private Bank's name through fake websites and email addresses. While the content is relevant to AML/Financial Crime and Consumer Protection, it is administrative in nature—a standard regulatory alert to warn the public and legitimate customers...
No description available.
Why this matters
The CSSF warning concerns identity theft and fraudulent misuse of the names of two legitimate Luxembourg-regulated firms (ADEPA ASSET MANAGEMENT S.A. and ADEPA ASSET SERVICING Luxembourg S.A.).
No description available.
Why this matters
The CSSF has issued a warning about unknown persons fraudulently impersonating DAC Investments S.à r.l. using a fake website and email addresses. The warning clarifies that the legitimate company is not responsible for these activities.
No description available.
Why this matters
This is a CSSF warning against unknown persons fraudulently misusing the name and identity of TEIKO ASSET MANAGEMENT S.À R.L., an unauthorized alternative investment fund manager.
No description available.
Why this matters
This is a CSSF warning against unknown persons misusing the name of INTERNATIONAL FUND SERVICES & ASSET MANAGEMENT S.A., an investment firm. The warning identifies fraudulent contact details (email: [email protected]) and clarifies that the legitimate company is not responsible for these activities.
No description available.
Why this matters
The CSSF warning concerns a fraudulent website impersonating BVF CAPITAL S.à r.l., involving identity theft and illicit activities. While the warning addresses financial crime and consumer protection concerns, it is a standard administrative alert about a specific fraudulent operation rather than a binding obligation...
No description available.
Why this matters
This is a CSSF warning against unknown persons fraudulently misusing the name of NEVENTA MANAGEMENT, a registered alternative investment fund manager. The warning provides fraudulent contact details (website, email) to help the public identify and avoid the scam.
No description available.
Why this matters
The update announces a survey by AMLA targeting EMIs and PSPs regarding Central Contact Points under AML frameworks. The survey is voluntary and informational in nature, with a September deadline.
No description available.
Why this matters
The CSSF warning concerns unknown persons fraudulently impersonating ANGELMAR Corp S.A. using a fake website and phone number. While the topic is financial crime (AML/fraud prevention), the content is a standard administrative alert to protect consumers and firms from identity theft rather than a binding obligation,...
No description available.
Why this matters
The CSSF has issued a warning about unknown persons fraudulently impersonating ICI Invest S.A. using a fake website, email addresses, and phone numbers. The warning clarifies that the legitimate company is not responsible for these activities.
No description available.
Why this matters
CSSF warning about identity theft and fraudulent impersonation of a legitimate Luxembourg alternative investment fund manager. High urgency due to active fraud scheme using fake contact details and website to deceive consumers and investors.
implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine
Why this matters
This is an EU implementing regulation on restrictive measures (sanctions) related to Ukraine, published as informational content by CSSF. It affects financial institutions' compliance with sanctions screening and AML obligations. Classified as news/informational rather than urgent regulatory change, hence null urgency.
No description available.
Why this matters
CSSF warning of identity theft and fraudulent impersonation of Luxembourg-registered company Molentis S.A. Fraudsters using fake website, email, and claiming false registered office. High urgency due to active fraud scheme targeting financial sector participants and potential customers.
No description available.
Why this matters
CSSF warning of identity theft and fraudulent impersonation of a legitimate tied agent. High urgency due to active fraud scheme using fake website and email addresses targeting clients of Gablau Invest Sàrl, requiring immediate awareness among market participants and consumers.
No description available.
Why this matters
CSSF warning about identity theft and fraudulent impersonation of legitimate investment firm. Fraudsters using fake website, emails, and phone number to deceive customers. High urgency due to active fraud scheme targeting financial services sector, requiring immediate awareness among regulated entities and consumers.
No description available.
Why this matters
CSSF warning about identity theft and fraudulent impersonation of Gekko Fund SICAV. Unknown persons misusing the fund's name through fake website, email addresses, and phone number to conduct illicit activities.
No description available.
Why this matters
CSSF guidance on new material operations notification requirements under CRD VI transposition. Informational webpage launch clarifying procedural obligations for credit institutions and financial holding companies regarding acquisitions, asset transfers, and mergers.
No description available.
Why this matters
CSSF warning of identity theft and fraudulent impersonation of legitimate investment firm. Fraudsters using fake websites to misrepresent Winvest International S.C.S., FIAR. High urgency due to active fraud scheme targeting consumers and potential reputational harm to legitimate entity.
on the fight against money laundering and terrorist financing
Why this matters
Consolidated legislative update on anti-money laundering and terrorist financing requirements applicable across financial services. Published as informational regulatory reference material by CSSF (Luxembourg regulator). Affects all regulated financial institutions.
amending Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine
Why this matters
EU sanctions regulation amending restrictive measures against Russia regarding Ukraine. This is informational regulatory update affecting financial institutions' compliance obligations for sanctions screening, reporting, and AML procedures.
amending Regulation (EU) No 833/2014 concerning restrictive measures in view of Russia’s actions destabilising the situation in Ukraine
Why this matters
This is an EU sanctions regulation amendment concerning Russia, published as regulatory news by CSSF. It affects financial institutions' compliance obligations regarding restrictive measures and sanctions screening.
implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine
Why this matters
This is an EU implementing regulation on restrictive measures (sanctions) regarding Ukraine, published by CSSF as informational content. It affects financial institutions' compliance obligations for sanctions screening, reporting, and AML/CFT procedures.
amending Regulation (EC) No 765/2006 concerning restrictive measures in view of the situation in Belarus and the involvement of Belarus in the Russian aggression against Ukraine
Why this matters
This is an EU Council Regulation amending restrictive measures against Belarus and related to Russian aggression. It constitutes sanctions/restrictive measures that impact financial institutions' AML/sanctions compliance obligations.
implementing Article 8a(1) of Regulation (EC) No 765/2006 concerning restrictive measures in view of the situation in Belarus and the involvement of Belarus in the Russian aggression against Ukraine
Why this matters
This is an EU implementing regulation concerning restrictive measures (sanctions) against Belarus and related entities. It impacts financial institutions' AML/sanctions compliance obligations across banking and payment sectors.
No description available.
Why this matters
CSSF warning about fraudulent impersonation of Luxempart S.A., a securities issuer. Unknown persons misusing the company name for identity theft and illicit activities. High urgency due to active fraud scheme targeting investors and stakeholders, requiring immediate awareness across financial institutions.
No description available.
Why this matters
CSSF warning of identity theft and fraudulent impersonation of authorized Luxembourg asset manager. Multiple fraudulent contact channels (websites, emails, phone numbers) used to deceive consumers. High urgency due to active fraud scheme targeting investors, though informational in nature as a regulatory alert.
No description available.
Why this matters
CSSF warning of fraudulent website impersonating legitimate financial services company. Involves identity theft, illicit activities, and unauthorized financial services provision. Critical urgency due to active fraud threat to consumers and need for immediate awareness across financial sector.
Administrative sanction imposed on the members of the board of directors of an electronic money institution
The CSSF has publicly announced that an **administrative sanction** was imposed on the **members of the board of directors of a Luxembourg electronic money institution** by decision dated 23 March 2026. Although the notice does not detail the breaches, the timing and targeted individuals strongly indicate failures in board-level governance and oversight under the new CSSF governance framework for payment and e‑money institutions (Circular 26/906), making this an important precedent for senior managers and directors in the payments and e‑money sector.
Non‑compliance with CSSF governance, safeguarding and AML/CFT expectations can lead to administrative sanctions directly against board members, reputational damage, potential licence constraints and increased supervisory scrutiny. For EMIs and PIs, this raises the risk profile of board roles and makes demonstrable, documented governance and oversight a critical compliance priority.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine
Why this matters
This is an EU implementing regulation on restrictive measures (sanctions) regarding Ukraine, published as informational content by CSSF. It affects financial institutions' compliance obligations for sanctions screening, reporting, and AML/CFT procedures.
No description available.
Why this matters
CSSF warning about fraudulent impersonation of Clearstream Banking S.A. using fake contact details. This is a financial crime alert requiring immediate awareness among market participants to prevent fraud victimization.
amending Regulation (EU) No 833/2014 concerning restrictive measures in view of Russia’s actions destabilising the situation in Ukraine
Why this matters
This is an EU Council Regulation amending sanctions measures against Russia related to Ukraine. It affects financial institutions' compliance obligations regarding restrictive measures, sanctions screening, and reporting requirements. Published as regulatory news update by CSSF (Luxembourg financial regulator).
implementing Regulation (EU) 2024/2642 concerning restrictive measures in view of Russia’s destabilising activities
Why this matters
This is an implementing regulation for EU restrictive measures against Russia. It affects financial institutions' compliance obligations regarding sanctions screening, reporting, and asset freeze procedures.
implementing Regulation (EU) 2024/1485 concerning restrictive measures in view of the situation in Russia
Why this matters
This is an implementing regulation for EU restrictive measures related to Russia, published by CSSF as informational content. It affects financial institutions' compliance obligations regarding sanctions and restrictive measures. Classified as news/informational with null urgency.
No description available.
Why this matters
CSSF warning of identity theft and impersonation of regulated investment firm European Broker S.A. Luxembourg. Fraudsters using spoofed email address to conduct illicit activities. High urgency due to active fraud threat affecting multiple stakeholders and need for immediate awareness among market participants.
No description available.
Why this matters
CSSF warning against unauthorized entity SB Systems sp. Zo.o conducting fraudulent investment services from Luxembourg without authorization. Critical urgency due to active fraud alert requiring immediate awareness among regulated entities and consumers.
No description available.
Why this matters
CSSF warning about fraudulent website impersonating legitimate financial services firm MLA Consulting. Involves identity theft and illicit activities targeting consumers and potentially financial institutions.
No description available.
Why this matters
CSSF warning about fraudulent impersonation of regulated investment firm 2 PM EUROPE S.A. through fake website, email, and phone contact details. Identity theft and illicit activities pose direct risks to consumers and market integrity.
No description available.
Why this matters
CSSF alert regarding identity theft and fraud prevention targeting financial sector entities. Informational content warning about impersonation of regulatory authority. Applies broadly to all regulated firms under CSSF supervision. No time-sensitive compliance deadline indicated.
No description available.
Why this matters
CSSF warning of fraudulent website impersonating legitimate Luxembourg financial services firm. Identity theft and illicit activities pose immediate risk to consumers and regulated entities. Critical urgency due to active fraud scheme requiring immediate awareness and protective action.
No description available.
The compliance impact is material because CSSF enforcement disclosures can expose weaknesses to the market, counterparties, auditors, and other regulators, creating reputational and supervisory pressure. Non-compliance with AML/CFT obligations can lead to public reprimands and potentially more severe measures if deficiencies persist or are systemic.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
Why this matters
CSSF warning of fraudulent website impersonating legitimate Luxembourg-based investment firms (Indylux Capital and Kherty Finance). Alert involves identity theft, illicit activities, and unauthorized use of company names across multiple jurisdictions.
No description available.
Why this matters
CSSF warning against unauthorized entity operating illegally in Luxembourg jurisdiction. Entity claims investment services capability without authorization. High urgency due to active illicit operations and consumer protection risk.
No description available.
Why this matters
CSSF warning against unauthorized entity UrbanMint Digital Assets S.A. operating www.urbanmint.io without proper authorization or supervision. Warning highlights illicit activities and lack of regulatory approval to provide investment/financial services in Luxembourg.
No description available.
FATF has launched a public consultation, flagged by the CSSF, on new **guidance for implementing the revised FATF Recommendation 16 (“travel rule”)**, with the objective of significantly increasing payment transparency by 2030. This consultation will shape how jurisdictions and supervisors (including Luxembourg/CSSF) expect payment and virtual asset flows to carry and use originator/beneficiary data, so compliance teams should treat this as an early signal of future mandatory AML/CTF requirements for both fiat and virtual asset transfers.
Non‑compliance with the revised travel‑rule expectations will materially increase the risk of supervisory criticism, enforcement action, and restrictions on cross‑border business, especially in higher‑risk client segments and payment corridors. Failure to implement adequate data‑collection and monitoring capabilities may also compromise sanctions and AML controls, leading to heightened legal, financial and reputational exposure.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Identification of obliged entities eligible for direct supervision by AMLA
Circular CSSF 26/914 identifies which Luxembourg obliged entities fall within the perimeter for **potential direct supervision by the future EU Anti-Money Laundering Authority (AMLA)**, as part of the new EU-level AML/CFT supervisory architecture. This matters for compliance teams because in‑scope entities will face an additional EU supervisory layer, more intrusive AML/CFT oversight, and will need to prepare for alignment with AMLA’s methodologies, data requirements, and enforcement practices.
The compliance impact is high for any entity that is, or may become, eligible for AMLA direct supervision, given the likely increase in supervisory intensity, data expectations, and EU‑level enforcement risk. Non‑compliance could result in sanctions from both AMLA and national authorities, including significant administrative fines, business restrictions, remediation mandates, and reputational damage across the EU.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
1) high-risk jurisdictions on which enhanced due diligence and, where appropriate, counter-measures are imposed2) jurisdictions under increased monitoring of the FATFVersion of 19 June 2026
CSSF published a new **Annex to Circular CSSF 22/822** on **22 June 2026**, updating the Luxembourg regulator’s reference list of FATF **high-risk jurisdictions** and **jurisdictions under increased monitoring**. For compliance teams, this matters because AML/CFT country-risk scoring, enhanced due diligence triggers, and sanctions-style controls must be aligned to the current FATF position reflected by CSSF.
Non-compliance can lead to supervisory findings, remediation orders, and possible enforcement action where firms fail to apply risk-sensitive AML controls consistent with CSSF/FATF expectations. The practical impact is highest for onboarding, correspondent-like relationships, cross-border payments, and any business line exposed to higher-risk jurisdictions.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine
Why this matters
Corrigendum to EU sanctions regulation concerning Ukraine. Affects financial institutions subject to restrictive measures compliance and reporting obligations. Published as regulatory update/news rather than urgent enforcement action.
implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine
Why this matters
This is a corrigendum to EU sanctions regulation concerning Ukraine. It affects financial institutions' compliance with restrictive measures and sanctions screening requirements. Published as informational update by CSSF (Luxembourg regulator). Applies broadly to all financial firms subject to EU sanctions regulations.
No description available.
Why this matters
CSSF warning about identity theft and fraud targeting Luxembourg investment fund managers with German branches. Involves forged websites and financial guarantees.
No description available.
Why this matters
CSSF warning of identity theft and fraudulent impersonation of authorized investment fund manager Nordea Investment Funds S.A. High urgency due to active fraud scheme using spoofed email addresses and phone numbers targeting potential investors/clients. Requires immediate awareness among market participants.
No description available.
Why this matters
CSSF warning of fraudulent website impersonating regulated fund manager RBC Funds (Lux). Involves identity theft, illicit activities, and unauthorized use of legitimate company credentials. Critical urgency due to active fraud targeting investors and potential harm to regulated entity's reputation and customer trust.
implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine
Why this matters
This is an EU implementing regulation on restrictive measures (sanctions) related to Ukraine. It affects financial institutions' compliance obligations regarding sanctions screening and AML/CFT procedures. Published as informational regulatory update by CSSF (Luxembourg financial regulator), hence null urgency.
implementing Regulation (EU) 2024/2642 concerning restrictive measures in view of Russia’s destabilising activities
Why this matters
This is an implementing regulation for EU restrictive measures against Russia. It affects financial institutions' compliance obligations regarding sanctions screening, reporting, and asset freezing. Classified as informational news publication rather than new substantive requirement, hence null urgency.
amending Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine
Why this matters
This is a Council Regulation amending EU restrictive measures regarding Ukraine. It impacts financial institutions through sanctions compliance, AML/CFT obligations, and reporting requirements. Published as informational content by CSSF (Luxembourg financial regulator), so urgency is null.
No description available.
Why this matters
CSSF clarification on ML/FT risk management expectations, addressing de-risking practices and financial inclusion balance. Informational guidance to supervised entities on proper risk management frameworks rather than risk avoidance, with emphasis on proportionate customer assessment and cooperation requirements.
No description available.
Why this matters
CSSF warning about fraudulent website impersonating legitimate investment undertaking (Robus Umbrella). Involves identity theft and illicit activities targeting collective investment scheme. High urgency due to active fraud threat to consumers and potential reputational harm to regulated entity.
No description available.
Why this matters
CSSF warning of identity theft and fraudulent impersonation of authorized alternative investment fund manager. Unknown persons misusing legitimate firm's name and contact details to conduct illicit activities.
No description available.
Why this matters
MiCAR STORs (Suspicious Transaction and Order Reports) under the Markets in Crypto-Assets Regulation is a regulatory framework requirement for reporting suspicious activities. This is informational content from CSSF (Luxembourg financial regulator) about a public register related to audit profession oversight.
No description available.
Why this matters
CSSF warning against unauthorized entity operating investment services without proper licensing. Tag Markets and related entities are conducting illicit financial activities from Mauritius while targeting Luxembourg market. High urgency due to active fraud risk to investors and need for market awareness.
Administrative sanction imposed on Stonehage Fleming Luxembourg S.A.
The CSSF has announced that an **administrative sanction was imposed on Stonehage Fleming Luxembourg S.A. on 5 March 2026**, but it has not yet published the underlying decision or grounds. For compliance teams, this signals that the CSSF continues to actively use sanctions against Luxembourg wealth/asset management entities and that a detailed decision is likely forthcoming, which may contain important precedents on governance, AML/CFT or conduct requirements.
The specific financial and qualitative impact of this particular sanction is not yet public, but recent CSSF cases show that deficiencies in governance, delegate oversight and AML/CFT controls can lead to significant fines, public censure and supervisory follow-up. Non-compliance increases the likelihood of intrusive inspections, remediation programmes under CSSF scrutiny, and reputational risk with clients and counterparties.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Further details concerning the AMLA webinar of 10 June 2026 from 10 am to 12 pm CEST
Why this matters
This is an informational update from CSSF announcing a webinar by AMLA regarding identification of obliged entities eligible for direct supervision. It covers AML/CFT regulatory requirements applicable to multiple financial sectors and firm types.
implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine
Why this matters
This is a corrigendum to EU sanctions regulation concerning Ukraine. It affects financial institutions' compliance with restrictive measures and sanctions screening requirements. Classified as informational/news content rather than new substantive regulatory requirement, hence null urgency.
No description available.
Why this matters
CSSF warning of fraudulent website impersonating legitimate wealth manager. Identity theft and illicit activities pose immediate risk to consumers and the legitimate firm's reputation. High urgency due to active fraud scheme targeting financial services clients.
No description available.
Why this matters
CSSF warning against unauthorized entity claiming to provide investment services without Luxembourg authorization. High urgency due to active illicit operations and consumer protection risk. Entity operating across multiple financial service categories without proper licensing.
Preparation of the new data collection exercice for the purpose of the direct supervision by AMLA – AMLA webinar of 10 June 2026 from 10 am – 12 pm CEST
Why this matters
AMLA webinar announcement regarding identification of obliged entities eligible for direct supervision. Covers AML/CFT regulatory framework, data collection exercise, and reporting requirements. Applies broadly to all obliged entities under AMLA jurisdiction.
No description available.
Why this matters
CSSF warning of fraudulent website impersonating authorized alternative investment fund manager. Identity theft and illicit activities pose direct risk to consumers and market integrity. High urgency due to active fraud scheme targeting legitimate firm's reputation and potential investor harm.
No description available.
Why this matters
CSSF thematic inspection report on fraud risk in revenue recognition for audit of financial statements. Covers Big 4 audit firms and PIEs. Informational content providing audit recommendations aligned with upcoming ISA 240 (Revised) effective December 15, 2026. No immediate compliance deadline, therefore null urgency.
No description available.
Why this matters
CSSF study on fraud risks in revenue recognition during financial statement audits. This is informational guidance applicable across financial services firms on audit and reporting practices. Published as a studies/reports document rather than enforcement action, warranting null urgency classification.
amending Regulation (EU) 2023/1529 concerning restrictive measures in view of Iran’s military support to Russia’s war of aggression against Ukraine and to armed groups and entities in the Middle East and the Red Sea region as well as Iran’s actions undermining freedom of navigation in the Middle East
Why this matters
This is an EU Council Regulation amending sanctions measures against Iran. It impacts financial institutions' compliance obligations regarding restrictive measures, sanctions screening, and reporting requirements.
No description available.
No description available.
No description available.
No description available.
No description available.
The CSSF publication highlights AMLA's public consultation on draft Regulatory Technical Standards (RTS) under Articles 16(4) and 17(3) of Regulation (EU) 2024/1624, specifying minimum group-wide AML/CFT requirements and additional measures for subsidiaries and branches in third countries. This matters because it aims to harmonize cross-border AML frameworks, ensuring groups maintain consolidated ML/TF risk views and robust controls, particularly in high-risk third-country operations, impacting EU financial groups' compliance structures. Private sector input is encouraged to align standards with practical operations.[https://www.cssf.lu/en/Document/public-consultation-by-amla-on-the-draft-rts-on-group-wide-minimum-requirements-and-additional-measures-for-subsidiaries-and-branches-in-third-countries/][https://www.amla.europa.eu/amla-consults-group-wide-requirements-and-business-wide-risk-assessment_en]
Urgency: High – Firms with third-country exposure must act now on consultation (closes 15 July 2026) to influence final RTS, as these will mandate binding minimums for group-wide AML/CFT, potentially requiring significant framework overhauls for risk consolidation and controls. Non-engagement risks misaligned systems post-adoption, increasing supervisory scrutiny under harmonized EU standards; early assessment prevents rushed...
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
AMLA has launched a public consultation on draft Guidelines for business-wide risk assessments (BWRA) under the new Anti-Money Laundering Regulation (EU 2024/1624), with submissions open until 15 July 2026. These guidelines establish minimum requirements for all obliged entities across financial and non-financial sectors to systematically identify and manage money laundering and terrorist financing risks inherent to their operations.
Urgency: HIGH
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
Why this matters
This newsletter from the CSSF (Luxembourg financial regulator) covers a range of topics relevant to banking, investment management, and wealth management firms operating in Luxembourg. The low urgency reflects that this is an informational publication rather than a time-sensitive regulatory update.
No description available.
Why this matters
This warning from the CSSF relates to potential illicit activities by an unauthorized entity operating a website called 'werdy.net', which is offering investment services or other financial services without authorization in Luxembourg.
No description available.
Why this matters
This regulatory warning concerns fraudulent activities misusing the name of a licensed crypto-asset service provider and electronic money institution, Coinbase Luxembourg S.A.
No description available.
Why this matters
This warning concerns an unauthorized entity named Afitaustin that is allegedly providing investment services or other financial services without authorization in Luxembourg. This poses risks to consumers and could involve illicit activities, requiring a high level of urgency.
No description available.
Why this matters
This is a warning from the CSSF about a potentially fraudulent website called Nuveramix, which is not authorized to provide investment or financial services in Luxembourg. This is a high urgency issue as it involves potential financial fraud targeting consumers.
on the operationalisation of European regulations in the area of financial services
Why this matters
This consolidated law on the operationalisation of European regulations in financial services is likely to impact banks, asset managers, and wealth managers across areas such as AML, prudential requirements, and licensing. The update indicates ongoing regulatory changes, warranting a medium level of urgency.
No description available.
Why this matters
This regulatory update provides a list of members of the CPDI, which is relevant for firms in the banking, investment management, and wealth management sectors. The topics covered include AML/financial crime, consumer protection, and authorization/licensing, which are important for these types of firms.
Situation as at 28 February 2026
Why this matters
This regulatory update from the CSSF provides information on the number of UCIs (Undertakings for Collective Investment) in Luxembourg, which is relevant for banking, investment management, and wealth management firms operating in the country.
No description available.
Why this matters
This newsletter from the CSSF (Luxembourg financial regulator) covers a range of topics relevant to banking, investment management, and wealth management firms operating in Luxembourg. The low urgency reflects the informational nature of the content.
(first publication: 30 October 2024)
Why this matters
This is a warning from the CSSF about fraudsters misusing the name of the CSSF Board Chair to contact supervised entities. It is relevant for banks, wealth managers, and all financial firms that may be targeted by such fraud attempts. The warning covers consumer protection, AML, and operational resilience topics.
Out-of-court consumer complaint resolution
Why this matters
This regulatory update from the CSSF covers consumer protection and financial crime issues, which are relevant for banking, wealth management, and fintech firms. The medium urgency reflects the ongoing nature of these compliance requirements.
No description available.
Why this matters
This is a warning from the CSSF about fraudulent activities misusing the name of JPMorgan Asset Management (Europe) S.à r.l., an investment management firm. It involves identity theft, illicit activities, and impersonation, which pose risks to consumers and the financial sector.
Latest update on the AML/CFT standardised data collection
This CSSF circular letter addresses the 2026 AML/CFT standardised data collection exercise, aligning with AMLA's EU-wide initiatives by adopting AMLA-developed templates for most supervised entities while requiring specialised professionals to use CSSF-specific forms. It matters for Luxembourg financial firms as it mandates reporting on ML/TF risks and mitigation measures to support consistent EU supervision, with recent delays emphasizing preparation needs amid evolving templates.
Urgency: High - Mandatory reporting supports CSSF's supervisory strategy and EU AMLA calibration, with non-compliance risking enforcement; delays provide preparation time but require immediate data readiness as final deadlines approach shortly (e.g., potential April submissions). This directly feeds into entity-level ML/TF risk assessments, influencing ongoing supervision and resource allocation.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
Why this matters
This is a warning from the CSSF regarding a fraudulent website impersonating a Luxembourg-based bank, Sumitomo Mitsui Trust Bank (Luxembourg) S.A. This poses risks of identity theft and illicit activities, which is of high importance for banks and wealth managers to be aware of.
implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine
Why this matters
This regulation implements restrictive measures against actions undermining Ukraine's territorial integrity, which is highly relevant for financial firms operating in the region or with Ukrainian counterparties. It covers areas such as AML, prudential requirements, and reporting, making it critical for compliance.
implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine
Why this matters
This Council Implementing Regulation imposes restrictive measures on actions undermining Ukraine's territorial integrity, sovereignty and independence. It is relevant for banks, wealth managers, and asset managers operating in the EU and dealing with entities/individuals subject to the sanctions.
No description available.
Why this matters
This is a warning from the CSSF regarding a fraudulent website impersonating a legitimate electronic money institution, VIVID MONEY S.A. The warning covers identity theft and illicit activities, which are relevant to AML/financial crime and consumer protection.
Delay in the 2026 AML/CFT standardised data collection
Why this matters
This interpretative note from the CSSF relates to a delay in the 2026 AML/CFT standardised data collection, which is relevant for banking, investment management and wealth management firms. It involves AML/financial crime compliance and reporting requirements, so the urgency is medium.
Delay in the 2026 AML/CFT standardised data collection
Why this matters
This regulatory update from the CSSF relates to a delay in the 2026 AML/CFT standardised data collection, which is relevant for banking, investment management, and wealth management firms. The update includes a reporting template, indicating new regulatory reporting requirements in the AML/financial crime domain.
No description available.
Why this matters
This regulatory update from the CSSF announces public hearings by the AMLA on draft regulatory technical standards related to AML/CFT requirements, including criteria for identifying business relationships, transactions, and customer due diligence.
Delay in the 2026 AML/CFT standardised data collection
The CSSF circular letter dated 11 March 2026 announces a delay in its planned AML/CFT standardised data collection exercise originally scheduled for 2026, primarily due to overlap with a concurrent broad-scope data collection by the European Anti-Money Laundering Authority (AMLA). This matters for compliance professionals as it reduces immediate reporting burdens on supervised entities, promotes regulatory simplification, and aligns Luxembourg practices with emerging EU AML/CFT methodologies, allowing firms to redirect resources to the mandatory AMLA exercise.
Urgency: Medium. The delay alleviates short-term pressure by postponing submissions and reducing dual reporting, enabling resource reallocation to higher-priority AMLA efforts amid EU harmonization. It matters for maintaining a risk-based approach (RBA) under FATF standards, avoiding overburden from overlapping exercises, and preparing for the new EU AML/CFT methodology—non-compliance risks supervisory scrutiny, but the simplification lowers immediate enforcement exposure.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Situation as at 31 January 2026
Why this matters
This regulatory update from the CSSF provides information on the number of UCIs (Undertakings for Collective Investment) in Luxembourg, which is relevant for banking, investment management, and wealth management firms operating in the country.
No description available.
Why this matters
This is a warning from the CSSF regarding fraudulent websites impersonating a regulated investment firm, which poses risks of identity theft and illicit activities. It is a high-urgency issue for banks, wealth managers, and fintechs that may be targeted or impersonated by such scams.
No description available.
Why this matters
This warning concerns a fraudulent website impersonating a legitimate investment firm, which poses risks of identity theft and illicit activities. It is relevant to banking, investment management, and wealth management firms, as well as fintechs, and requires prompt attention due to the potential for consumer harm.
Administrative sanction imposed on an investment firm
The CSSF imposed an administrative sanction on 8 October 2025 against an unnamed investment firm, as detailed in a publication released on 4 March 2026. This enforcement action underscores CSSF's rigorous oversight of investment firms, particularly in areas like AML/CFT compliance, conduct rules, and organizational requirements, serving as a warning for similar entities to strengthen cooperation and internal controls. It matters because it highlights escalating fines for repeated or material breaches, potentially influencing supervisory expectations across Luxembourg's financial sector.
Urgency: High - This matters due to CSSF's pattern of publicizing nominative sanctions (e.g., Max Gain Capital, Zeus Asset Management), signaling increased scrutiny on investment firms amid AML/CFT and conduct risks. Fines (EUR 10,000–127,500) represent material hits (up to 10% of turnover), with factors like poor cooperation amplifying penalties; firms with similar exposures face elevated inspection risk, especially post-2025 enforcement wave.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
implementing Regulation (EU) No 208/2014 concerning restrictive measures directed against certain persons, entities and bodies in view of the situation in Ukraine
Why this matters
This regulation implements restrictive measures against certain persons, entities and bodies in view of the situation in Ukraine. It is relevant for banking, investment management and wealth management firms that may be impacted by sanctions or need to comply with reporting requirements.
implementing Article 8a of Regulation (EC) No 765/2006 concerning restrictive measures in view of the situation in Belarus and the involvement of Belarus in the Russian aggression against Ukraine
Why this matters
This regulation implements restrictive measures against Belarus in view of its involvement in the Russian aggression against Ukraine. It is likely to have a high impact on banks, wealth managers, and asset managers that have exposure to Belarus or are required to comply with the sanctions.
No description available.
Why this matters
This directive establishes a public register of the audit profession in the EU, which is relevant for banking, investment management, and wealth management firms that are subject to audit requirements. The topics covered include AML/financial crime, consumer protection, and reporting/disclosure obligations.
No description available.
Why this matters
This is a warning from the CSSF about fraudulent activities carried out by an unauthorized entity called Aisbierg Ennerstetzung Bank, which is posing as a financial services provider.
No description available.
Why this matters
This is a warning from the CSSF about fraudulent activities by persons misusing the name of MERITUM CAPITAL, a Luxembourg-based investment management firm. The warning covers identity theft, illicit activities, and the use of unauthorized websites and email addresses.
No description available.
Why this matters
This warning concerns a fraudulent website impersonating a legitimate investment firm, which poses risks of identity theft and illicit activities. It is a high-priority issue for banks, wealth managers, and fintechs that may be targeted or impacted by this scam.
No description available.
Why this matters
This warning concerns a fraudulent website impersonating a legitimate investment management firm, which poses risks of identity theft and illicit activities. It is a high-urgency issue for firms in the banking, investment management, and wealth management sectors that need to be aware of this scam and take appropriate...
implementing Regulation (EU) 2024/1485 concerning restrictive measures in view of the situation in Russia
Why this matters
This regulation implements further restrictive measures against Russia, which will impact financial firms across banking, investment management, and wealth management sectors. The topics covered include AML/financial crime, prudential requirements, and reporting obligations, which are critical for firms to comply with.
No description available.
Why this matters
This warning from the CSSF relates to potential illicit activities associated with the website www.qatari.xyz, which is not authorized to provide investment or financial services in Luxembourg. This is a high-urgency issue for banks, wealth managers, and fintechs that may be impacted by this unauthorized entity.
No description available.
Why this matters
This newsletter from the CSSF (Luxembourg financial regulator) covers a range of topics relevant to banking, investment management, and wealth management firms operating in Luxembourg. The low urgency reflects that this is an informational update rather than a critical regulatory change.
1) high-risk jurisdictions on which enhanced due diligence and, where appropriate, counter-measures are imposed2) jurisdictions under increased monitoring of the FATFVersion of 17 February 2026
The Annex of Circular CSSF 22/822 (Version of 17 February 2026) is Luxembourg's Commission de Surveillance du Secteur Financier's implementation guidance on FATF (Financial Action Task Force) designations of high-risk jurisdictions requiring enhanced due diligence and counter-measures, as well as jurisdictions under increased monitoring. This document is critical for Luxembourg-regulated financial institutions because it operationalizes international AML/CFT standards into binding compliance obligations, directly impacting customer acceptance, transaction monitoring, and correspondent banking relationships.
The current version (17 February 2026) represents the most recent update to the CSSF's FATF-aligned jurisdiction risk framework. Based on the available search results, the document establishes two primary regulatory categories: High-Risk Jurisdictions (Category 1): Jurisdictions designated by FATF as having strategic deficiencies in their AML/CFT regimes, requiring enhanced due diligence and, where appropriate, counter-measures.
Urgency: CRITICAL
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Version 23
This CSSF FAQ (Version 23, updated 17 February 2026) provides interpretive guidance on the Luxembourg Law of 17 December 2010 relating to undertakings for collective investment (UCIs), covering UCITS, Part II UCIs, SIFs, and SICARs. It matters for compliance professionals as it clarifies authorisation processes, investment rules, and supervisory expectations, ensuring alignment with evolving EU frameworks like AIFMD and MiCAR. The update, effective today, addresses recent regulatory shifts including crypto-asset integration.
Urgency: High – The update coincides with MiCAR implementation and today's release, requiring immediate review for crypto-exposed funds to avoid unauthorised strategies or AML gaps; non-compliance risks supervisory actions, authorisation delays, or investor disputes in Luxembourg's key fund domicile.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Version 3.1
Why this matters
This regulatory update from the CSSF relates to the notification requirements under Article 33 of the AIFMD, which is relevant for investment managers and wealth managers. It covers AML/financial crime compliance as well as authorization and licensing, which are critical topics for these firms.
No description available.
Why this matters
This warning concerns fraudulent activities by an unauthorized entity, Minea Global Finance SA, which is not supervised by the CSSF and has not been granted any authorization to provide investment or financial services in Luxembourg. This poses a high risk to consumers and the financial system.
No description available.
Why this matters
This is a warning from the CSSF about an unauthorized entity called 'Digital Asset Bank S.A. Luxembourg' that is operating a website at www.digitalasset-bank.com and engaging in illicit activities. This is a high urgency issue for banks, fintechs, and crypto exchanges that may be impacted by this unauthorized entity.
AML/CFT standardised data collection taking place in 2026
The CSSF Circular Letter 2026-02-12 announces a standardized data collection exercise on AML/CFT for supervised entities, scheduled for 2026, aimed at enhancing regulatory oversight of money laundering and terrorist financing risks. This matters because it signals intensified CSSF scrutiny on AML/CFT compliance, requiring firms to prepare structured data submissions that could inform future supervisory actions, risk assessments, and enforcement. As part of broader CSSF AML/CFT initiatives, non-compliance risks fines or heightened inspections.
Urgency: High – With data collection in 2026 underway today (12 February 2026), firms face immediate preparation needs amid recent enforcement (e.g., EUR 102,000 fine on depositary for AML-related gaps) and conferences signaling sub-sector focus. This elevates AML/CFT as a supervisory priority, potentially triggering on-site inspections, fines, or remediation orders for inadequate data/risks; proactive alignment prevents escalation in a risk-based regime.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
Why this matters
This warning concerns a fraudulent website impersonating a legitimate financial services firm, which poses risks of identity theft and illicit activities. It is relevant for banks, wealth managers, and fintechs that may be targeted or impersonated in such scams.
No description available.
Why this matters
This regulatory update warns about online financial frauds and scams in an artificial intelligence world, which is highly relevant for banking, investment management, and wealth management firms, as well as fintechs and crypto exchanges that operate in the digital finance space.
No description available.
Why this matters
This regulatory update from the CSSF warns about crypto frauds and scams, which is relevant for crypto exchanges and all firms dealing with crypto assets. It covers consumer protection and AML/financial crime topics.
No description available.
The Commission de Surveillance du Secteur Financier (CSSF) has updated its FAQ on crypto-asset investments by undertakings for collective investment, effective February 4, 2026, to align with the EU's Markets in Crypto-Assets Regulation (MiCAR). This update establishes clear investment limits and licensing requirements for UCITS and AIFs investing in crypto-assets, fundamentally reshaping how Luxembourg-regulated funds can structure crypto exposure.
The regulatory framework introduces several material modifications: Investment Exposure Limits UCITS may invest indirectly in crypto-assets for a maximum of 10% of their net asset value (NAV). These indirect investments are restricted to transferable securities that do not embed derivatives. AIFs open to retail investors other than well-informed investors face the same 10% NAV ceiling. MiCAR Alignment The FAQ modifications directly reflect the entry into force of Regulation (EU) 2023/1114 on markets in crypto-assets.
Urgency: HIGH
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
Why this matters
This is a warning from the CSSF regarding an unauthorized entity, Castleforbes Wealth Limited, that is allegedly providing investment services without proper authorization in Luxembourg.
No description available.
Why this matters
This regulatory update provides information on a registration form for meetings with UCI Departments of the CSSF, which is relevant for financial firms in the banking, investment management, and wealth management sectors.
implementing Regulation (EU) 2024/2642 concerning restrictive measures in view of Russia’s destabilising activities
Why this matters
This regulation implements sanctions against Russia, which will impact banking, investment management, and wealth management firms that have exposure to Russia. Firms will need to comply with the new sanctions requirements, including reporting and disclosure obligations.
implementing Regulation (EU) 2024/2642 concerning restrictive measures in view of Russia’s destabilising activities
Why this matters
This regulation implements further restrictive measures against Russia, which will impact financial institutions across banking, investment management, and wealth management sectors.
Administrative sanction imposed on a registered alternative investment fund manager (“AIFM”)
The CSSF imposed an administrative fine of EUR 10,000 on registered alternative investment fund manager (AIFM) C5 S.à r.l. on 11 September 2025 for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, despite reminders, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores the CSSF's strict enforcement of AML reporting duties and serves as a warning to supervised entities on the consequences of non-compliance with supervisory requests. It matters because it demonstrates the CSSF's willingness to publish names and impose fines for procedural lapses, potentially signaling increased scrutiny on AIFMs' AML/CFT obligations amid broader regulatory focus on financial crime risks.
Urgency: High – This sanction, though modest at EUR 10,000, exemplifies CSSF's proactive use of fines and public naming for AML reporting failures, with potential for higher penalties up to EUR 500,000 or 0.5% of turnover. It heightens risks for registered AIFMs amid CSSF's 2025-2026 priorities on financial crime, sanctions, and expanded reporting (e.g., Circular 25/894), where procedural lapses can trigger investigations, reputational damage, and barriers to remediation. Firms must prioritize to avoid escalation, especially post-publication on 30 January 2026.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
No description available.
No description available.
No description available.
No description available.
Why this matters
This is a warning about fraudulent activities misusing the name of a specific investment fund, which is relevant for investment managers and wealth managers who need to be aware of such scams to protect their clients.
No description available.
Why this matters
This regulatory update provides information on the list of members of the Board, which is relevant for banking, investment management, and wealth management firms that are subject to oversight by the CSSF.
No description available.
Why this matters
This regulatory update provides information on the updated list of members of the Executive Board, which is relevant for banking, investment management, and wealth management firms that operate in Luxembourg and are subject to CSSF oversight.
No description available.
Why this matters
This regulatory update from the CSSF (Luxembourg financial regulator) provides information about the public register of the audit profession, which is relevant for banking, investment management, and wealth management firms operating in Luxembourg.
No description available.
Why this matters
This newsletter from the CSSF (Luxembourg financial regulator) covers a range of topics relevant to banking, investment management, and wealth management firms operating in Luxembourg. The low urgency reflects that this is an informational publication rather than a time-sensitive regulatory update.
No description available.
Why this matters
This regulatory update is focused on the money laundering and terrorist financing risks associated with trust and company service provider (TCSP) activities within the financial sector in Luxembourg. It requires firms providing these services to integrate the findings and recommendations into their AML/CFT frameworks.
Central administration, internal governance and risk management
Circular CSSF 26/906, published on 20 January 2026, consolidates and clarifies Luxembourg's rules on central administration, internal governance, and risk management specifically for payment institutions, electronic money institutions, and account information service providers. It repeals prior circulars (IML 95/120, IML 96/126, IML 98/143, and CSSF 04/155) to address growth in transaction volumes by mandating robust governance, control functions, and risk processes, enhancing safety, efficiency, and trust in these services. This matters for compliance professionals as it strengthens defenses against financial crime, operational risks, and supervisory scrutiny in a high-growth sector.
Urgency: High – With a 30 June 2026 deadline (five months from publication), firms face immediate pressure to review and remediate governance gaps amid sector growth and heightened AML/CFT scrutiny; non-compliance risks supervisory actions, fines, or license issues, especially as it closes criminal exploitation vectors like weak controls and third-party risks.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
2026 update
Why this matters
This regulatory update from the CSSF focuses on the ML/FT risk assessment of specialized professionals in the financial sector providing corporate services, such as trust and company service providers. This is relevant for banks, wealth managers, and family offices that may offer these types of services.
amending Council Regulation (EU) No 833/2014 concerning restrictive measures in view of Russia’s actions destabilising the situation in Ukraine
Why this matters
This regulation amends existing sanctions against Russia related to the Ukraine conflict, which will impact financial firms across banking, investment management, and wealth management sectors. The changes require firms to update their compliance programs, reporting, and capital requirements.
No description available.
Why this matters
This appears to be an informational update from the CSSF regarding the SSM Calendar Claude Wampach, which is likely relevant for banks, wealth managers, and asset managers operating in the banking and investment management sectors.
No description available.
This CSSF publication, dated January 12, 2026, identifies the specific population (likely a firm or individual) subject to an enforcement action, such as an administrative sanction, as part of the CSSF's transparency in supervisory measures. It matters because it signals CSSF's active enforcement priorities, potentially in areas like AML or reporting failures, enabling firms to assess similar risks in their operations and strengthen compliance to avoid parallel actions. Published amid rising focus on financial crime typologies like sexual extortion, it underscores the regulator's commitment to public accountability.
No new regulatory changes or requirements are introduced in this publication, as it is an enforcement notice rather than a circular or guideline. It serves as a disclosure of an ongoing or concluded enforcement case, aligning with CSSF's practice of publishing sanction details to deter non-compliance and inform the market, without altering existing rules.
Urgency: High – Immediate relevance for the named party facing direct consequences; medium-to-high for peers due to CSSF's pattern of public enforcements signaling heightened scrutiny on financial crime, especially amid rising OCSE/FSEC cases noted in recent CSSF guidance. It matters as it could preview broader supervisory sweeps, impacting reputation, operations, and costs if similar vulnerabilities exist.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
amending Delegated Regulation (EU) 2016/1675 to add Russia to the list of high-risk third countries with strategic deficiencies
Why this matters
This regulation amends the list of high-risk third countries, which has implications for AML/CFT compliance, prudential requirements, and authorization/licensing for firms operating in the banking, investment management, and wealth management sectors.
Administrative sanction imposed on the alternative investment fund manager Premium Capital Management (“AIFM”)
The CSSF imposed a €10,000 administrative fine on 11 September 2025 against alternative investment fund manager (AIFM) Premium Capital Management for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores the CSSF's strict enforcement of AML reporting duties, signaling heightened scrutiny on timely supervisory cooperation amid ongoing AML risks in Luxembourg. Compliance teams should view this as a reminder of the low tolerance for even administrative lapses, with potential for escalated fines in repeat cases.
This is not a regulatory change but an enforcement precedent under existing rules: non-compliance with Article 5(1) of the AML/CFT Law, which mandates annual submission of a financial crime questionnaire ("Questionnaire") to the CSSF. The fine was calculated per Articles 8-4(1), 8-4(2)(f), and 8-4(3)(a), considering circumstances under Article 8-5(1). Publication followed Article 8-6(1) after a proportionality assessment, confirming no market stability risks.
Urgency: Medium – This €10,000 fine for a straightforward reporting failure demonstrates CSSF's willingness to penalize non-cooperation swiftly, even without aggravating factors, but the amount is modest and targeted at administrative breaches. It matters as a warning shot in Luxembourg's AML landscape, where repeated failures could trigger higher fines (up to proportionality limits under Article 8-5), reputational damage via public naming, or supervisory escalations; firms should audit 2025/2026 reporting now to preempt similar actions, especially post-NRA updates.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Administrative sanction imposed on the alternative investment fund manager Sunbricks GP S.à r.l. (“AIFM”)
The CSSF imposed a **€10,000 administrative fine on Sunbricks GP S.à r.l.**, an alternative investment fund manager, for failing to submit a mandatory annual financial crime questionnaire by the April 4, 2025 deadline, despite two formal reminders. This enforcement action demonstrates the CSSF's strict approach to cooperation obligations under Luxembourg's anti-money laundering and counter-terrorist financing (AML/CFT) framework and signals that non-submission of required compliance documentation—even without evidence of underlying financial crime—triggers regulatory penalties.
Urgency: HIGH
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Administrative sanction imposed on the alternative investment fund manager Capitalis Premiere Group (“AIFM”)
The CSSF imposed a €10,000 administrative fine on alternative investment fund manager (AIFM) Capitalis Premiere Group on 11 September 2025 for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, despite two reminders, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores the CSSF's strict enforcement of AML reporting duties, signaling heightened scrutiny on timely supervisory cooperation for Luxembourg-regulated entities. Compliance teams should note this as a low-value but public reminder of potential fines for administrative lapses in AML processes.
This is not a regulatory change or new requirement but an enforcement precedent under existing rules: non-compliance with the annual financial crime questionnaire submission, mandated by Article 5(1) of the AML/CFT Law, triggers fines per Articles 8-4(1), 8-4(2)(f), and 8-4(3)(a). The CSSF considered all relevant circumstances under Article 8-5(1) to set the €10,000 fine amount and published the sanction nominatively after proportionality assessment per Article 8-6(1), confirming no market stability risks.
Urgency: Medium - This €10,000 fine is modest but publicly names the firm, amplifying reputational risk in Luxembourg's competitive fund domicile; it matters as a clear CSSF signal of zero tolerance for basic cooperation failures in AML, potentially foreshadowing stricter enforcement amid EU AML harmonization pressures. AIFMs face ongoing annual risk, with non-response despite reminders treated as willful breach; firms with weak reporting controls should prioritize fixes to avoid cumulative fines or escalations.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Administrative sanction imposed on the alternative investment fund manager Lion Management (“AIFM”)
The CSSF imposed a €10,000 administrative fine on Lion Management, an alternative investment fund manager, on 11 September 2025 for failing to submit a mandatory annual financial crime questionnaire by the 4 April 2025 deadline. This enforcement action demonstrates the CSSF's commitment to enforcing cooperation obligations under Luxembourg's anti-money laundering and terrorist financing framework, with direct implications for all AIFMs regarding timely compliance with supervisory reporting requirements.
Urgency: HIGH
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Administrative sanction imposed on the alternative investment fund manager Max Gain Capital S.à r.l. (“AIFM”)
The CSSF imposed a €10,000 administrative fine on Max Gain Capital S.à r.l., an alternative investment fund manager, on 11 September 2025 for failing to submit a mandatory annual financial crime questionnaire by the April 2025 deadline. This enforcement action demonstrates the CSSF's active monitoring of AML/CFT compliance obligations and its willingness to sanction non-cooperation, even for procedural failures unrelated to substantive money laundering violations.
Urgency: HIGH
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Administrative sanction imposed on the alternative investment fund manager Agriland Management S.A. (“AIFM”)
The Commission de Surveillance du Secteur Financier (CSSF), Luxembourg's financial regulator, imposed a **EUR 10,000 administrative fine on Agriland Management S.A.**, an alternative investment fund manager, on 11 September 2025 for failing to submit a mandatory annual financial crime questionnaire by the April 2025 deadline. This enforcement action demonstrates the CSSF's commitment to enforcing cooperation obligations under Luxembourg's anti-money laundering and terrorist financing (AML/CFT) framework and signals heightened scrutiny of compliance with supervisory reporting requirements.
Urgency: HIGH
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Administrative sanction imposed on the alternative investment fund manager Bedrock I GP S.à r.l. (“AIFM”)
The CSSF imposed a €10,000 administrative fine on alternative investment fund manager (AIFM) Bedrock I GP S.à r.l. on 11 September 2025 for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, despite two reminders, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores CSSF's strict enforcement of AML reporting duties and serves as a public warning to supervised entities on timely supervisory compliance. It matters because it demonstrates that even modest fines are pursued for basic reporting lapses, potentially signaling heightened scrutiny on AIFMs' AML processes amid ongoing regulatory focus on financial crime risks.
This is not a regulatory change or new requirement but an enforcement of existing obligations under the amended Law of 12 November 2004 on the fight against money laundering and terrorist financing (AML/CFT Law). Specifically, it reaffirms the mandatory annual submission of the CSSF's financial crime questionnaire ("Questionnaire") by supervised professionals, including AIFMs under Article 3(2) of the Law of 12 July 2013 on AIFMs, as part of the cooperation duty in Article 5(1).
Urgency: Medium - This is a post-facto enforcement on a past breach (2024 reporting cycle), with the €10,000 fine relatively low, indicating proportionality for a first-time or isolated lapse. It matters as a leading indicator of CSSF's 2025-2026 focus on AML cooperation, with multiple similar AIFM sanctions published simultaneously, risking escalated fines or reputational harm for repeat offenders; firms should prioritize reporting hygiene to avoid public naming, which CSSF deems non-disruptive to markets here.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Administrative sanction imposed on the alternative investment fund manager C5 Haven Cyber GP S.à r.l. (“AIFM”)
The CSSF imposed a €10,000 administrative fine on alternative investment fund manager (AIFM) C5 Haven Cyber GP S.à r.l. on 11 September 2025 for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, despite two reminders, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores CSSF's strict enforcement of AML reporting duties and serves as a public warning to supervised entities on the consequences of non-cooperation. It matters because it demonstrates that even modest fines will be levied for procedural lapses, potentially signaling increased scrutiny on timely AML compliance submissions amid broader regulatory focus on financial crime risks.
Urgency: Medium - This is a low-value fine (€10,000) for a procedural breach, not involving substantive AML failures like suspicious transactions or sanctions screening delays seen in higher fines (e.g., €185,000 on Rakuten Bank). It matters as a precedent for CSSF's willingness to publicly name-and-shame for basic non-cooperation, potentially escalating to higher penalties for repeats; with publication on 9 January 2026, firms should prioritize 2025/2026 reporting to avoid similar exposure amid CSSF's active enforcement (3192+ sanctions published).
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Administrative sanction imposed on the alternative investment fund manager C5 S.à r.l. (“AIFM”)
The CSSF imposed a €10,000 administrative fine on alternative investment fund manager C5 Haven Cyber GP S.à r.l. on 11 September 2025 for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, despite reminders, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores CSSF's strict enforcement of reporting duties in AML/CFT compliance, serving as a warning to supervised entities on the consequences of administrative delays. It matters because it highlights low-tolerance for even minor procedural lapses, potentially signaling increased scrutiny on annual reporting amid broader AML/CFT priorities.
Urgency: Medium - Matters due to CSSF's demonstrated willingness to impose and publicize fines for straightforward reporting failures, even at €10,000, which could escalate for repeat or severe cases; acts as a precedent amid rising AML/CFT enforcement (e.g., larger fines like €214,000 in similar contexts). Firms delaying submissions risk reputational damage from nominative publications under Article 8-6(1), market confidence erosion, and cumulative penalties; proactive remediation now prevents higher scrutiny in upcoming inspections.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Update of Circular CSSF 24/853 on the Long Form Report (as amended by Circular CSSF 25/870) – Practical rules concerning the self-assessment questionnaire to be submitted by investment firms Mission and related reports of the réviseurs d’entreprises agréés (approved statutory auditors)
Circular CSSF 26/904 updates Circular CSSF 24/853 (as amended by Circular CSSF 25/870) by introducing a revised Long Form Report (LFR) for investment firms, featuring a digital self-assessment questionnaire (SAQ) and enhanced auditor reports focused on AML/CFT and risk management. This matters because it aligns reporting with CSSF's risk-based supervision under CSSF 4.0, reduces redundancies, applies proportionality based on business models, and mandates digital submission to improve efficiency and data analysis.
Urgency: High - Applies immediately to FY ending 31 December 2024 reports, requiring swift updates to reporting processes, digital tools, and AML/CFT documentation amid CSSF's risk-based shift; non-compliance risks supervisory actions, as LFR directly informs CSSF oversight on key prudential/AML areas with no transition period specified.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Update of Circular CSSF 22/821 on the Long Form Report, as amended by Circulars CSSF 23/845 and CSSF 24/865
Circular CSSF 25/897 updates Circular CSSF 22/821 on the Long Form Report (LFR) for credit institutions, further aligning the self-assessment questionnaire (SAQ) with current supervisory priorities such as ML/FT risks and organizational aspects. This matters because it refines reporting to reduce redundancies, enhance transparency in REA assessments, and reflect evolving prudential focuses since prior amendments via Circulars CSSF 23/845 and 24/865, ensuring institutions' reports better support CSSF oversight.
Urgency: High - Institutions face immediate refinement needs for 2025 year-end reporting (e.g., SAQ due ~Q1 2026), with stricter REA scrutiny on AML/CFT transparency risking supervisory findings or enforcement if vague assessments persist; aligns with ongoing CSSF push for risk-focused oversight amid regulatory evolution.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Long Form ReportPractical rules concerning the self-assessment questionnaire to be submitted by institutionsMission and related reports of the statutory auditors (réviseurs d’entreprises agréés)
**Circular CSSF 22/821** (as amended) fundamentally restructures how Luxembourg credit institutions report to the Commission de Surveillance du Secteur Financier (CSSF) by replacing the traditional Long Form Report with a digital **self-assessment questionnaire (SAQ)**, complemented by auditor-prepared reports. This shift represents a significant operational change that requires institutions to directly participate in prudential self-assessment while maintaining robust external audit oversight, making it essential for compliance and operational teams to understand new submission requirements and digital workflows.
Urgency: HIGH
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Adoption of the EBA Guidelines on internal policies, procedures and controls to ensure the implementation of Union and national restrictive measures (sanctions)
Circular CSSF 25/896 adopts the EBA Guidelines EBA/GL/2024/14 and EBA/GL/2024/15, mandating Luxembourg financial institutions to establish robust internal policies, procedures, and controls for complying with EU and national restrictive measures (sanctions). This matters because it sets binding EU-wide standards to prevent sanctions violations and circumvention, with absolute obligations for immediate asset freezing and reporting, amid escalating geopolitical tensions.
Urgency: High – With less than 12 months until the 30 December 2025 deadline (as of January 2026), firms face binding requirements for absolute compliance, including personal accountability for management bodies; non-compliance risks enforcement by CSSF, reputational damage, and fines amid frequent EU sanctions updates (e.g., Regulations 2025/1469, 2025/1476). This elevates sanctions from operational task to strategic board priority.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Press release 25/04
Why this matters
This regulatory update warns about loan scams on social media, which is relevant for banking, consumer credit, and mortgage lending firms. It covers consumer protection and anti-money laundering topics, and is applicable to banks, fintechs, and all firms that engage in lending activities.
No description available.
Why this matters
This appears to be a general news update from the CSSF regulator, likely containing information relevant to multiple financial sectors and firm types. The lack of detailed content description suggests this is a low urgency, informational update.