Authorisation & Licensing regulatory updates from Luxembourg.
We track 231 Authorisation & Licensing updates from Luxembourg regulators, published by CSSF. The archive covers 156 news items, 34 warnings and 19 enforcement actions. Most recent update: September 2026. Coverage runs from 2020 to 2026.
Administrative sanction imposed on Opexia PSF S.A.
Why this matters
This is a published administrative sanction decision by the Commission de Surveillance du Secteur Financier (CSSF, Luxembourg's financial regulator) against Opexia PSF S.A., a payment service firm.
This is a standard quarterly statistics release from CSSF (Commission de Surveillance du Secteur Financier) presenting data on authorised and other investment fund managers as of 30 June 2026.
This is a news announcement from CSSF regarding authorisation/registration of IFM as a benchmark administrator under EU Regulation 2016/1011. The content is informational in nature (published notice with downloadable form), announcing a completed regulatory status change rather than imposing new requirements or...
The content is purely administrative and informational—a monthly statistics table showing CSSF prospectus approval volumes from August 2025 to August 2026. It contains no regulatory guidance, new rules, enforcement precedent, or actionable requirements.
The content is a procedural notice about an updated entry form (version 23.04) from CSSF with technical guidance on how to save and open the PDF file using Acrobat Reader.
Overview of the CSSF’s activities and initiatives in 2025
Why this matters
This is an annual report from the Commission de Surveillance du Secteur Financier (Luxembourg's financial regulator) summarizing 2025 activities, initiatives, and references to EBA/ESMA guidelines. The content is primarily informational and administrative in nature.
amending Circular CSSF 20/750 on requirements regarding information and communication technology (ICT) and security risk management
AI Analysis
Circular CSSF 25/881, published on 2025-04-09, realigned Circular CSSF 20/750 with DORA by removing DORA financial entities from its scope and retaining the framework for entities outside DORA. Circular CSSF 26/915, published on 2026-08-27, further removes qualifying Luxembourg third-country branches from Circular 20/750 and confirms that DORA applies to them where their non-EU head office would fall within DORA Article 2(1)(a) to (t).
Key dates
2025-01-17
DORA became applicable to financial entities within its scope, subject to the specific DORA provisions and technical standards applicable to each entity.
2025-04-09
Circular CSSF 25/881 was published and took effect, removing DORA financial entities from Circular 20/750 and retaining 20/750 for entities outside DORA; PSP-specific provisions were reorganised under Circular 25/880.
2026-06-30 Deadline
CSSF extended the first Register of Information submission for Luxembourg branches of third-country credit institutions to this date on a best-efforts basis; the CSSF indicated that the required level of quality should be achieved for the 2027 submission.
2026-08-27
Circular CSSF 26/915 was published, confirming the DORA treatment of qualifying third-country branches and removing them from the full scope of Circular 20/750 and related overlapping circular provisions.
2027-03-31 Deadline
Target date identified by the CSSF for the required-quality Register of Information submission by Luxembourg branches of third-country credit institutions.
Suggested considerations
Firms should classify each Luxembourg entity and branch against DORA Article 2 and the amended scope of Circular 20/750, including an assessment of whether a third-country head office would qualify under DORA Article 2(1)(a) to (t).
Compliance teams may wish to determine whether the entity should operate under DORA rather than 20/750, and document the rationale, legal-entity perimeter and treatment of any Luxembourg branch.
Firms remaining within Circular 20/750 should consider reviewing their ICT and security-risk-management framework, governance approvals, risk assessments, incident processes, business-continuity arrangements and control testing against the continuing requirements.
Payment service providers should consider replacing references to the PSP provisions formerly contained in Circular 20/750 with the applicable requirements in Circular CSSF 25/880 and EBA/GL/2025/02.
Third-country branches treated as DORA entities should consider validating their DORA governance, ICT-risk framework, incident-reporting arrangements, ICT contractual inventory and Register of Information processes, taking account of CSSF reporting communications.
Firms should update policies, regulatory inventories, outsourcing and ICT-third-party registers, training materials and regulatory mapping to distinguish DORA obligations from the residual Circular 20/750 obligations.
Compliance teams may wish to retain evidence of the scope assessment and implementation date, because the 2025 amendment was effective immediately and the 2026 amendment changes the treatment of a previously identified 20/750 population.
What changed
Circular 25/881 provides that DORA financial entities supervised by the CSSF no longer fall within Circular 20/750; for entities covered by 20/750 but outside DORA, the circular continues to apply in full. Payment-service-provider-specific ICT and security-risk provisions were removed from 20/750 and regrouped in Circular CSSF 25/880, reflecting the revised EBA Guidelines on ICT and security risk management for payment service providers, including EBA/GL/2025/02.
Compliance impact
The principal impact is perimeter and framework migration rather than a wholly new ICT-control standard: entities in DORA must avoid relying on residual 20/750 requirements where DORA governs, while non-DORA entities retain substantive 20/750 obligations. The CSSF and market commentary indicate that misclassification may create gaps in DORA governance, ICT-third-party documentation, incident reporting and Register of Information submissions, with potential supervisory findings and related remediation or enforcement consequences.
This is a standard regulatory warning against an unlicensed entity (MelzaPay S.A.) claiming to offer financial services from Luxembourg without CSSF authorisation. The warning targets a specific fraudulent operator rather than establishing new obligations or precedent.
Information to be provided by a ManCo15 managing a European UCITS (UCITS without compartments)
Why this matters
This is a form update published by the CSSF (Luxembourg financial regulator) for ManCos managing European UCITS without compartments. The content is purely procedural—providing an updated template for information submission. No new rules, enforcement actions, or substantive policy guidance are present.
Information to be provided by a Luxembourg AIFM which manages an AIF non-authorised by the CSSF (AIF without compartments)
Why this matters
This is a form update published by the CSSF for Luxembourg AIFMs managing non-authorised AIFs. The content is procedural—providing a template for initial/update submissions—with a related circular (CSSF 25/894) that establishes the underlying reporting requirement.
Information to be provided by a Luxembourg AIFM which manages an AIF non-authorised by the CSSF (AIF with multiple compartments)
Why this matters
This is a form update published by the CSSF (Luxembourg regulator) for AIFMs managing non-authorised AIFs with multiple compartments. The content is purely procedural—providing an updated template for information submission.
The content is purely administrative and informational—a monthly statistics table showing CSSF prospectus approval volumes from July 2025 to July 2026. It contains no regulatory guidance, new rules, enforcement precedent, or actionable requirements.
CSSF warning against unauthorized entity claiming to provide investment services from Luxembourg. Critical for investor protection as 3cGroup operates without proper authorization and supervision. High urgency due to active illicit operations and potential fraud risk to consumers.
This is a regulatory statistical report from CSSF on collective investment undertakings (UCIs) in Luxembourg as of June 2026. It provides market data, net asset information, and lists of newly registered and deregistered funds.
CSSF guidance on new material operations notification requirements under CRD VI transposition. Informational webpage launch clarifying procedural obligations for credit institutions and financial holding companies regarding acquisitions, asset transfers, and mergers.
CSSF publication providing statistical analysis and best practices guidance on processing times for initial authorizations of regulated investment vehicles (UCITS, SIFs, PII L10). Informational content sharing regulatory expectations and procedural guidance for fund authorization applicants.
CSSF communication regarding implementation of AIFMD II directive changes for Luxembourg-domiciled investment fund managers. Provides updated notification templates and procedural guidance for cross-border management activities within the EEA. Informational in nature with implementation deadline of 31 July 2026.
This is an informational notification letter from CSSF regarding AIFM procedures for managing AIFs across Member States or establishing branches under AIFMD Article 33.
This is an informational notification letter from CSSF regarding the UCITS Directive framework for management companies seeking to pursue authorized activities in other EU Member States. It provides a template form for cross-border notification under Articles 17(2) and 18(1) of Directive 2009/65/EC.
This is an administrative form update from CSSF for UCI depositary authorization applications. It is informational/procedural content regarding licensing requirements for entities acting as depositaries for Undertakings for Collective Investment.
CSSF notification establishing procedural requirements for crypto-asset white paper submissions under MiCAR Title II. Informational guidance on eDesk portal submission process, file formats (iXBRL in .zip, PDF annexes), and applicable entity types. Effective from 3 August 2026.
on the fight against money laundering and terrorist financing
Why this matters
Consolidated legislative update on anti-money laundering and terrorist financing requirements applicable across financial services. Published as informational regulatory reference material by CSSF (Luxembourg regulator). Affects all regulated financial institutions.
This is an informational update about CSSF internal board rules and references to EBA/ESMA guidelines. The content primarily concerns governance procedures, audit profession registration, and general regulatory framework updates applicable across financial services.
This is an informational press release from CSSF announcing the judicial dissolution and liquidation of DIVERSIFIED ASSET MANAGEMENT S.A., an investment firm. The document details the court order, appointment of liquidator and official receiver, and procedures for eligible clients to claim compensation through the...
CSSF warning of fraudulent website impersonating legitimate financial services company. Involves identity theft, illicit activities, and unauthorized financial services provision. Critical urgency due to active fraud threat to consumers and need for immediate awareness across financial sector.
ESMA supervisory briefing on triangular passporting under MiFID II, establishing common supervisory expectations for investment firms using branches/tied agents across multiple EU member states. Informational guidance on regulatory framework, firm responsibilities, and client protections.
This is a statistical publication from CSSF regarding securities issuers with Luxembourg as home Member State under the Law of 11 January 2008. It is informational/reporting content providing monthly statistics on registered issuers, not a regulatory requirement or enforcement action.
This is an informational publication of monthly statistics on prospectus notifications sent by the CSSF (Luxembourg's financial regulator) to other EEA competent authorities. It documents regulatory compliance and cross-border notification activity related to prospectuses under capital markets regulations.
CSSF announcement regarding authorized investment funds and Islamic finance with reference to audit profession public register. Primarily informational content about regulatory framework and compliance infrastructure rather than substantive policy change. No time-sensitive compliance deadline indicated.
This is an informational notification about a public register of the audit profession maintained by CSSF (Luxembourg financial regulator). It primarily concerns regulatory transparency and professional registration rather than substantive regulatory requirements.
This is an informational notification about a DPE (Designated Person for Enforcement) notification template and public register of the audit profession maintained by CSSF (Luxembourg financial regulator).
This is a notification template for Systematic Internalisers under MiFID II, issued by Luxembourg's financial regulator (CSSF). It relates to capital markets disclosure and regulatory reporting requirements. The content appears to be informational/procedural guidance rather than urgent regulatory change.
CSSF warning against unauthorized entity Nexura VG operating without proper authorization to provide investment/financial services. High urgency due to active illicit operations and consumer protection risk, though not critical as it is a warning rather than emergency alert.
CSSF warning against unauthorized entity SB Systems sp. Zo.o conducting fraudulent investment services from Luxembourg without authorization. Critical urgency due to active fraud alert requiring immediate awareness among regulated entities and consumers.
CSSF alert regarding identity theft and fraud prevention targeting financial sector entities. Informational content warning about impersonation of regulatory authority. Applies broadly to all regulated firms under CSSF supervision. No time-sensitive compliance deadline indicated.
Article 7b EMIR reporting requirement for active accounts is a regulatory disclosure obligation affecting derivatives market participants. The CSSF source indicates Luxembourg regulatory guidance. Content appears to be informational/procedural rather than announcing new requirements, hence null urgency.
Informational update from CSSF regarding the end of MiCA transition period for virtual asset service providers on 1 July 2026. Focuses on regulatory compliance requirements, consumer guidance on checking provider authorizations, and wind-down procedures for non-compliant providers.
This is a regulatory statistical report from CSSF on collective investment undertakings (UCIs) in Luxembourg as of May 2026. It provides monthly performance data, net asset tracking, and registration/deregistration updates.
This is an informational update about the CSSF's public register of the audit profession. It primarily concerns regulatory registration and disclosure requirements applicable to audit firms operating in Luxembourg's financial sector.
CSSF communication announcing the application of EU ESG Ratings Regulation (2024/3005) effective 2 July 2026. Requires financial market participants and advisers to disclose ESG ratings in marketing communications with specific website disclosures per Annex III.
This is an informational update from CSSF (Luxembourg financial regulator) providing statistical data on the number of UCIs (Undertakings for Collective Investment) registered in the public audit profession register as of May 31, 2026.
CSSF warning of fraudulent website impersonating legitimate Luxembourg financial services firm. Identity theft and illicit activities pose immediate risk to consumers and regulated entities. Critical urgency due to active fraud scheme requiring immediate awareness and protective action.
CSSF announcement regarding public register of audit profession exemptions for 2025. This is informational content about regulatory registry data rather than a substantive regulatory requirement.
This is an informational announcement about a public register of the audit profession maintained by CSSF (Luxembourg's financial regulator). It contains cookie policy and website navigation information rather than substantive regulatory requirements.
Supervisory disclosure document from CSSF reporting statistics on investment firms utilizing transitional provisions under IFD/IFR. This is informational/statistical reporting on regulatory compliance metrics rather than a new requirement or urgent directive.
CSSF supervisory disclosure document outlining regulatory options and discretions under EU investment firm directives (2019/2034 and 2019/2033). This is informational guidance for compliance with capital requirements and reporting frameworks applicable across financial services sectors.
This is an informational announcement about the public register of the audit profession maintained by CSSF (Luxembourg financial regulator). It relates to regulatory reporting requirements and professional licensing/authorization.
CSSF supervisory disclosure document outlining specific disclosure requirements for investment firms in 2025. This is informational guidance material published by the Luxembourg financial regulator, not a regulatory change requiring immediate action.
This is an informational announcement about a public register of the audit profession maintained by CSSF (Luxembourg financial regulator). It relates to audit firm licensing/authorization and is primarily procedural/administrative in nature.
Informational announcement regarding transposition of EU Directive 2019/2034 establishing a public register of the audit profession. This is regulatory guidance content from CSSF (Luxembourg financial regulator) with no immediate compliance deadline indicated.
CSSF warning of fraudulent website impersonating legitimate Luxembourg-based investment firms (Indylux Capital and Kherty Finance). Alert involves identity theft, illicit activities, and unauthorized use of company names across multiple jurisdictions.
CSSF warning against unauthorized entity operating illegally in Luxembourg jurisdiction. Entity claims investment services capability without authorization. High urgency due to active illicit operations and consumer protection risk.
CSSF warning against unauthorized entity UrbanMint Digital Assets S.A. operating www.urbanmint.io without proper authorization or supervision. Warning highlights illicit activities and lack of regulatory approval to provide investment/financial services in Luxembourg.
ESMA directive regarding wind-down of unauthorised crypto-asset service providers as MiCA transitional period concludes. High urgency due to regulatory deadline and mandatory compliance requirement for unauthorised providers, with emphasis on client asset safeguarding during transition.
This is a notification form from CSSF regarding a Luxembourg-based Investment Fund Manager (IFM) seeking to provide ancillary services to third parties. It is informational content announcing regulatory filing procedures under Luxembourg financial laws (Law of 2013 and Law of 2010), with no indication of urgent...
under Article 5(4)(b)(iv) of the Law of 2013 and/or Article 101(3)(b), fourth indent of the Law of 2010 as introduced by the Law of 3 March 2026, transposing Directive (EU) 2024/927 of the European Parliament and of the Council of 13 March 2024
Why this matters
CSSF communication announcing new notification procedures for Luxembourg-based investment fund managers seeking to provide ancillary services to third parties under transposed EU Directive 2024/927. Informational guidance on regulatory requirements and form submission process.
The CSSF has introduced two **mandatory standardised application forms** for authorisation of UCITS **domestic mergers** under the Luxembourg Law of 17 December 2010 and **outbound cross‑border mergers** where the receiving UCITS is located in another EU Member State under Directive 2009/65/EC. From 19 June 2026, any new UCITS merger authorisation request of these types must use the new forms and be filed by email with the full supporting documentation required by the applicable UCITS merger provisions.
Key dates
19 June 2026
- CSSF communiqué published announcing the two new merger authorisation forms for UCITS domestic mergers and UCITS outbound cross‑border mergers
19 June 2026 Deadline
- **Start of mandatory use of the new forms** for all **new merger authorisation applications** filed with the CSSF; applications submitted from this date must use the new templates and be sent to [email protected]
Suggested considerations
Identify all current and planned UCITS domestic and outbound cross‑border merger projects and determine which will have CSSF authorisation requests submitted on or after 19 June 2026 so that the new forms are used.
Download and review in detail the “Application form for authorisation of a UCITS domestic merger” and “Application form for authorisation of a UCITS outbound cross‑border merger” and map each field of the forms to existing internal data sources and documents.
Update internal UCITS merger procedures and checklists to replace any existing CSSF filing templates with the new standardised forms and to include the requirement that all merger authorisation applications are submitted to [email protected].
Train legal, product, operations and compliance staff involved in UCITS mergers on how to complete the new forms accurately, including coordination of information across the prospectus, KIIDs/KIDs, common draft merger terms, depositary statements and shareholder communications.
Review and, where necessary, update board and governance templates (board minutes, resolutions approving merger terms) to ensure they produce all information that the new forms require to be confirmed or attached.
What changed
- The CSSF has created a standardised “Application form for authorisation of a UCITS domestic merger” specifically for merger authorisation requests where both merging and receiving UCITS are...
The CSSF has created a standardised “Application form for authorisation of a UCITS outbound cross‑border merger” for mergers where the merging UCITS is Luxembourg‑authorised and the receiving UCITS...
Use of the two new forms is mandatory for all new merger authorisation applications submitted to the CSSF from 19 June 2026 onwards; legacy formats (ad‑hoc letters or bespoke templates) may no longer...
Each application form must be “duly completed” and accompanied by all documents required under the applicable UCITS merger regulations, including the common draft terms of merger, updated prospectus...
The CSSF has specified a centralised submission channel for these applications: completed forms and supporting documentation must be sent to [email protected], aligning merger filings with the...
Compliance impact
Non‑compliance (e.g. using outdated templates or submitting incomplete forms) is likely to result in the CSSF treating the file as inadmissible or incomplete, delaying merger authorisation and potentially requiring postponement of planned merger effective dates. Repeated deficiencies or failure to comply with the standardised process may also raise supervisory concerns about the firm’s governance and regulatory controls around UCITS product actions.
This is an informational regulatory document from CSSF regarding application procedures for UCITS outbound cross-border mergers. It pertains to investment management authorization processes and is primarily procedural/administrative in nature rather than substantive regulatory change, warranting null urgency...
Document concerns UCITS domestic merger authorization procedures from Luxembourg financial regulator CSSF. This is procedural/informational content regarding investment fund licensing requirements, not time-sensitive regulatory change.
CSSF warning against unauthorized crypto exchange operating without Luxembourg authorization. High urgency due to active illicit operations and consumer protection risk, though not critical as it is a warning rather than emergency alert.
CSSF warning of fraudulent website impersonating regulated fund manager RBC Funds (Lux). Involves identity theft, illicit activities, and unauthorized use of legitimate company credentials. Critical urgency due to active fraud targeting investors and potential harm to regulated entity's reputation and customer trust.
This is a monthly statistical publication from CSSF regarding securities issuers with Luxembourg as home Member State under the Law of 11 January 2008. It is informational/regulatory reporting content providing periodic data on registered issuers, not a directive or urgent regulatory change.
This is a monthly statistical report from CSSF documenting prospectus notifications sent to other EEA competent authorities. It is informational content tracking regulatory compliance notifications rather than announcing new requirements or urgent regulatory changes.
CSSF monthly prospectus approval statistics are informational regulatory data showing approval volumes over a 13-month period. This is administrative reporting relevant to capital markets participants requiring prospectus approval. No urgent action or critical compliance deadline indicated.
amending Delegated Regulation (EU) 2019/980 as regards the reduced content and the standardised format and sequence of the EU Follow-on prospectus and the EU Growth issuance prospectus
Why this matters
This is an EU delegated regulation amending prospectus requirements for follow-on offerings and growth issuances. It affects capital markets participants and issuers regarding standardized prospectus format and content. Classified as informational regulatory update rather than urgent compliance requirement.
This is an SSM (Single Supervisory Mechanism) calendar publication from CSSF (Luxembourg financial regulator) listing scheduled supervisory activities and events. It is informational/administrative in nature, providing transparency on regulatory calendar items rather than announcing new rules or requirements.
CSSF guidance document providing an overview of Luxembourg investment vehicles and their Investment Fund Managers (IFM) framework. This is informational/educational content updated for regulatory clarity on vehicle structures and IFM requirements.
This is an updated notification letter template from CSSF regarding marketing notifications for EU AIFs and ELTIFs under AIFMD and ELTIF regulations. It is informational/procedural guidance for asset managers seeking to market alternative investment funds and long-term investment funds across EU member states.
CSSF warning against unauthorized entity operating investment services without proper licensing. Tag Markets and related entities are conducting illicit financial activities from Mauritius while targeting Luxembourg market. High urgency due to active fraud risk to investors and need for market awareness.
This is an updated regulatory guidance document from CSSF regarding marketing of non-EU Alternative Investment Funds (AIFs) by EU-based AIFMs to professional investors in Luxembourg.
This is an updated regulatory form and guidance from CSSF regarding marketing of AIFs by non-EU AIFMs to professional investors in Luxembourg under Article 45 of the AIFM Law. It is informational content providing procedural requirements for asset managers seeking to market alternative investment funds.
Further details concerning the AMLA webinar of 10 June 2026 from 10 am to 12 pm CEST
Why this matters
This is an informational update from CSSF announcing a webinar by AMLA regarding identification of obliged entities eligible for direct supervision. It covers AML/CFT regulatory requirements applicable to multiple financial sectors and firm types.
Administrative sanction imposed on a registered alternative investment fund manager
AI Analysis
The CSSF has published an administrative sanction dated 17 April 2026 imposed on a **registered alternative investment fund manager (registered AIFM)**, but the public notice contains no detail on the nature of the breach, legal basis, or penalty level, which are presumably only available in the linked PDFs. For compliance teams, this is another data point that the CSSF is actively enforcing the AIFMD and related Luxembourg implementing laws against even registered (sub‑threshold) AIFMs, not only fully authorised managers.
Because the body text and PDFs are not accessible from the prompt, the analysis below focuses on the **regulatory framework and typical CSSF enforcement themes** that are most likely relevant, and how compliance teams at AIFMs should respond.
---
Key dates
17 April 2026
- CSSF adopts an administrative sanction decision against a registered alternative investment fund manager
05 June 2026
- CSSF publishes the administrative sanction notice on its website, including links to the detailed sanction decision in PDF form
Suggested considerations
Obtain and review the full CSSF sanction decision PDFs published with the 17 April 2026 administrative sanction to identify the specific legal provisions, facts and control failures cited.
Map the identified breaches (e.g. governance, risk management, reporting, valuation, delegation, marketing, or conduct of business) against your firm’s current policies and procedures under the Law of 12 July 2013 on AIFMs and the AIFMD framework.
Perform a targeted gap analysis for registered AIFMs, focusing on whether “light” registration has led to under‑resourced compliance, risk, valuation, or reporting functions that could attract similar enforcement.
Review and, where necessary, update internal governance arrangements, including board oversight, documented decision‑making, and escalation processes for regulatory issues, to align with CSSF expectations evidenced in recent sanctions against AIFMs and management companies.
Test the effectiveness of regulatory reporting and disclosure processes (including Annex IV reporting, investor disclosures, periodic reporting, and prospectus/issuing document accuracy) to ensure they are complete, timely and consistent with CSSF rules.
What changed
There are no formal rule changes announced in the short notice itself; however, the enforcement action reinforces several practical expectations that compliance teams should treat as de‑facto...
CSSF confirms that registered alternative investment fund managers are fully subject to Luxembourg’s AIFM framework, including the Law of 12 July 2013 on alternative investment fund managers and the...
CSSF reiterates, through enforcement practice, that registration status (sub‑threshold AIFM) does not shield managers from administrative sanctions where organisational, conduct, reporting, or...
CSSF continues its policy of public naming and shaming through publication of administrative sanctions, signalling that reputational impact is a key component of its deterrence strategy.
The sanction underscores the CSSF’s readiness to use its full sanctioning toolkit under the AIFM Law, which can include monetary fines, public statements, and prohibitions or restrictions on...
Compliance impact
The compliance impact is medium to high: while the publication does not create new rules, it underscores that the CSSF will actively sanction even registered AIFMs and publicly disclose those sanctions, increasing both regulatory and reputational risk for weakly controlled managers. Firms that treat registration as a “lighter” supervisory regime without proportionate controls are particularly exposed to similar action.
CSSF warning against unauthorized entity claiming to offer investment services without Luxembourg authorization. High urgency due to active illicit operations and consumer protection risk, though not critical as it is a warning notice rather than emergency alert.
Quarterly statistical report from CSSF on investment fund managers in Luxembourg as of 31 March 2026. Provides data on authorized and other IFMs, assets under management, employment figures, and cross-border activities. Informational content for regulatory monitoring and compliance purposes.
This is a regulatory statistical report from CSSF on collective investment undertakings (UCIs) in Luxembourg as of April 2026. It provides market data, net asset developments, and registration/deregistration information.
CSSF warning against unauthorized entity claiming to provide investment services without Luxembourg authorization. High urgency due to active illicit operations and consumer protection risk. Entity operating across multiple financial service categories without proper licensing.
This is a user guide update for remuneration reporting from CSSF (Luxembourg financial regulator). It relates to disclosure and reporting requirements for audit profession entities. The content is informational/guidance in nature rather than announcing new regulatory requirements, hence null urgency.
Preparation of the new data collection exercice for the purpose of the direct supervision by AMLA – AMLA webinar of 10 June 2026 from 10 am – 12 pm CEST
Why this matters
AMLA webinar announcement regarding identification of obliged entities eligible for direct supervision. Covers AML/CFT regulatory framework, data collection exercise, and reporting requirements. Applies broadly to all obliged entities under AMLA jurisdiction.
Standard form for the notification of Home Member State
Why this matters
This is an informational update from CSSF regarding a standard form for Home Member State notification, related to transparency requirements for issuers. It is procedural/administrative in nature with no time-sensitive compliance deadline indicated.
CSSF questionnaire update regarding Benchmark Regulation compliance and audit profession registration. This is informational content about regulatory reporting requirements and professional licensing/registration, applicable broadly to financial firms under Luxembourg supervision.
CSSF warning of fraudulent website impersonating authorized alternative investment fund manager. Identity theft and illicit activities pose direct risk to consumers and market integrity. High urgency due to active fraud scheme targeting legitimate firm's reputation and potential investor harm.
CSSF publishes mandatory list of independent approved statutory auditors and audit firms meeting EU Regulation 537/2014 Article 16 criteria (receiving <15% audit fees from PIEs).
CSSF statistical update on UCI (Undertakings for Collective Investment) numbers as of April 2026. Informational content providing regulatory data and references to EBA/ESMA guidelines. No urgent action required; primarily serves as reference material for regulated entities and industry participants.
The CSSF has formally repealed Circular IML 91/75 with immediate effect through the publication of Circular CSSF 26/912 on 22 May 2026. Compliance teams for Luxembourg UCIs and related structures must now ensure that no policies, procedures or prospectus provisions continue to rely on or reference IML 91/75, and instead rely on the current UCI, SIF, SICAR and EU fund law framework and subsequent CSSF circulars and administrative practice.
Key dates
21 January 1991
- Original Circular IML 91/75 entered into force, setting rules for undertakings governed by the Law of 30 March 1988 on undertakings for collective investment
22 May 2026
- Circular CSSF 26/912 is published and takes effect, repealing Circular IML 91/75 (as amended) with immediate effect and archiving it from the same date
Suggested considerations
Identify and inventory all internal and external documents (including policies, procedures, compliance manuals, prospectuses, offering documents, service agreements and SLAs) that reference Circular IML 91/75 or its amending Circulars CSSF 05/177, 18/697, 21/790, 22/811 and 25/901.
Remove or replace all references to Circular IML 91/75 and its amending circulars in compliance frameworks, manuals, registers of applicable rules and control libraries, ensuring they are mapped instead to the current applicable UCI, SIF, SICAR, AIFM and relevant CSSF circulars.
Perform a gap analysis to confirm that all substantive topics previously governed by IML 91/75 in your framework are now fully covered by current Luxembourg laws, EU fund regulations and up‑to‑date CSSF circulars and FAQs.
Update training materials and onboarding content for compliance, portfolio management, risk and operations staff to reflect that IML 91/75 has been repealed and to direct staff to the current legal and regulatory sources governing UCIs and alternative funds.
Adjust internal audit and compliance monitoring programs so that any test steps or key controls referencing IML 91/75 are updated to reference the applicable current provisions and CSSF administrative practice.
What changed
- Circular IML 91/75, which set out rules for Luxembourg undertakings governed by the Law of 30 March 1988 on undertakings for collective investment, is repealed in full with effect from 22 May 2026...
All amendments to Circular IML 91/75 introduced by Circulars CSSF 05/177, 18/697, 21/790, 22/811 and 25/901 are implicitly repealed as part of the repeal of IML 91/75 itself.
The regulatory expectations previously contained in IML 91/75 are now either superseded by later Luxembourg fund laws (including post‑1988 UCI legislation and regimes for SICARs and SIFs), later CSSF...
The historical link to the Law of 30 March 1988 on undertakings for collective investment is effectively severed at circular level, confirming that the operative framework is now the modern suite of...
IML 91/75 is flagged as archived by the CSSF as of 22 May 2026, clarifying that it has no continuing normative or interpretative value as a live supervisory instrument.
Compliance impact
The immediate compliance risk is moderate: there are no new obligations, but relying on a repealed circular can create legal uncertainty, documentation inconsistencies and supervisory challenges during CSSF inspections. Failure to update frameworks may weaken control design, lead to outdated disclosures and reduce credibility with the CSSF in the event of reviews or thematic inspections.
Document is a questionnaire template for sub-fund approval from Luxembourg's financial regulator (CSSF). This is procedural/informational content related to investment fund authorization requirements, not a substantive regulatory change. Urgency is null as this is administrative guidance.
1° amending:(a) the Law of 5 April 1993 on the financial sector, as amended;(b) the Law of 17 December 2010 relating to undertakings for collective investment, as amended;(c) the Law of 18 December 2015 on the failure of credit institutions and certain investment firms, as amended;(d) the Law of 15 March 2016 on OTC…
This warning from the CSSF relates to potential illicit activities by an unauthorized entity operating a website called 'werdy.net', which is offering investment services or other financial services without authorization in Luxembourg.
This regulatory update is related to the progress of a liquidation, which is likely to impact banking, investment management, and wealth management firms. The topics covered include prudential requirements, reporting, and authorization, which are relevant for these sectors.
This regulatory update provides guidance on the additional information required for AIFMs to market AIFs, which is relevant for investment management and wealth management firms that manage and market alternative investment funds.
This regulatory update from the CSSF covers the EBA Guidelines and Recommendations, which are relevant for banking, investment management, and wealth management firms. The topics include prudential requirements, reporting, and authorization, indicating medium urgency for these regulated entities.
This regulatory warning concerns fraudulent activities misusing the name of a licensed crypto-asset service provider and electronic money institution, Coinbase Luxembourg S.A.
This warning concerns an unauthorized entity named Afitaustin that is allegedly providing investment services or other financial services without authorization in Luxembourg. This poses risks to consumers and could involve illicit activities, requiring a high level of urgency.
This regulatory update from the CSSF in Luxembourg provides monthly statistics on issuers of securities whose home Member State is Luxembourg. It covers topics related to reporting, authorization, and prudential requirements for banks, asset managers, and broker-dealers operating in the Luxembourg market.
This regulatory update from the CSSF provides monthly statistics on notifications sent to other EEA competent authorities, covering topics such as prospectuses and base prospectuses. This is informational in nature and does not appear to require immediate action, hence the low urgency classification.
This regulatory update from the CSSF provides monthly statistics on notifications received from other EEA competent authorities, primarily related to prospectuses and base prospectuses.
This regulatory update from the CSSF provides monthly statistics on the number of prospectuses approved, which is relevant for investment management firms, banks, and broker-dealers operating in Luxembourg.
This is a warning from the CSSF about a potentially fraudulent website called Nuveramix, which is not authorized to provide investment or financial services in Luxembourg. This is a high urgency issue as it involves potential financial fraud targeting consumers.
This law relates to the issuance of covered bonds, which is relevant for banks, wealth managers, and the broader financial sector. It covers prudential requirements, authorization, and reporting obligations, indicating a medium level of urgency for firms in the affected sectors.
on the operationalisation of European regulations in the area of financial services
Why this matters
This consolidated law on the operationalisation of European regulations in financial services is likely to impact banks, asset managers, and wealth managers across areas such as AML, prudential requirements, and licensing. The update indicates ongoing regulatory changes, warranting a medium level of urgency.
This regulatory update relates to the Law of 30 May 2018 on markets in financial instruments, which impacts banking, investment management, and capital markets firms. It covers prudential requirements, reporting and disclosure obligations, as well as authorization and licensing.
on key information documents for packaged retail and insurance-based investment products
Why this matters
This regulatory update relates to the Law of 17 April 2018 on key information documents for packaged retail and insurance-based investment products, which impacts firms in the banking, investment management, and insurance sectors.
This regulatory update relates to the law on market abuse, which is relevant for banking, investment management, and capital markets firms. It covers topics such as market abuse surveillance, reporting and disclosure requirements, and authorization and licensing.
This regulatory update relates to the audit profession in Luxembourg, which is relevant for banking, investment management, and wealth management firms operating in the country. It covers prudential requirements, authorization and licensing, as well as governance standards for statutory auditors.
on the failure of credit institutions and certain investment firms
Why this matters
This regulatory update relates to the law on the failure of credit institutions and certain investment firms, which is being updated. It covers prudential and operational requirements, as well as authorization and licensing for banks, wealth managers, and asset managers.
relating to undertakings for collective investment
Why this matters
This regulatory update relates to the Luxembourg Law of 17 December 2010 on undertakings for collective investment, which is relevant for investment management firms, wealth managers, and banks operating in Luxembourg.
transposing Directive 2004/25/EC of the European Parliament and of the Council of 21 April 2004 on takeover bids
Why this matters
This regulatory update relates to the transposition of the EU Takeover Directive, which impacts banking, investment management, and capital markets firms. It covers authorization, prudential, and market abuse topics.
on institutions for occupational retirement provision in the form of SEPCAVs and ASSEPs
Why this matters
This regulatory update relates to the law on institutions for occupational retirement provision in Luxembourg, which impacts banking, investment management, and insurance firms involved in pension products. It covers prudential requirements, authorization, and reporting obligations for these firms.
This regulatory update consolidates and amends the Law of 5 April 1993 on the financial sector, which is relevant for banks, wealth managers, and asset managers. The update covers prudential requirements, reporting obligations, and licensing/authorization, indicating medium urgency for affected firms.
This regulatory update provides information on the members of the Resolution Board, which is relevant for banks, wealth managers, and asset managers subject to prudential requirements, reporting obligations, and authorization procedures.
This regulatory update provides a list of members of the CPDI, which is relevant for firms in the banking, investment management, and wealth management sectors. The topics covered include AML/financial crime, consumer protection, and authorization/licensing, which are important for these types of firms.
This regulatory update from the CSSF covers a pre-inception readiness review for managed file transfer (MFT) services, which is relevant for investment management firms, wealth managers, and banks.
Application of the Guidelines of the European Securities and Markets Authority for the criteria on the assessment of knowledge and competence under the Markets in Crypto Assets Regulation (MiCA) (ESMA35-24871704-2922)
AI Analysis
Circular CSSF 26/909 specifies how the CSSF applies ESMA's Guidelines (ESMA35-24871704-2922) for assessing **knowledge and competence** criteria under MiCA, targeting staff involved in crypto-asset services. It matters because it enforces MiCA's staff certification requirements, ensuring Luxembourg CASPs meet EU-wide standards for consumer protection and operational integrity amid the full MiCA rollout on 30 December 2024.
Assess Staff Competence: Implement ESMA-guided evaluations (e.g., exams, certifications) for all relevant personnel handling crypto services; document results in governance frameworks.
Update Policies and Training: Integrate competence criteria into HR, onboarding, and annual reviews; roll out MiCA-specific training on reporting, breaches, and governance.
Licensing Dossier Enhancement: Include competence attestations in CSSF applications; appoint dedicated compliance/risk officers with verified qualifications.
Ongoing Monitoring: Conduct regular audits, penetration tests, and incident planning; confirm compliance annually via management body statements.
Early CSSF Engagement: Schedule dialogues and info sessions; create MiCA readiness scorecards for board and regulator discussions.
What changed
- Adoption of ESMA Guidelines: CSSF mandates application of ESMA's criteria for evaluating staff knowledge and competence in crypto-asset services, including roles in custody, trading, portfolio...
Assessment Framework: Firms must implement standardized tests and processes to verify staff qualifications, aligning with MiCA Article 62 on CASP authorization, focusing on technical crypto...
No New Standalone Rules: This circular builds on prior CSSF MiCA circulars (e.g., 25/890 on crypto-asset classification), integrating competence checks into licensing dossiers and ongoing supervision.
Compliance impact
Urgency: High – With publication today (1 April 2026) and MiCA's CASP regime live since 30 December 2024, firms face immediate supervisory scrutiny during licensing and VASP transitions ending 1 July 2026. Non-compliance risks authorization denial, enforcement, or operational halts, especially as CSSF audits dossiers for competence gaps amid Luxembourg's role as MiCA hub.
This regulatory update from the CSSF in Luxembourg provides statistics on the origin of UCI (Undertakings for Collective Investment) initiators in the country. This information is relevant for investment management and wealth management firms operating in Luxembourg.
This regulatory update provides annual statistics on the development of the Luxembourg banking sector over the past decades, including key metrics such as number of banks, balance sheet totals, and net results. The information is relevant for banks, wealth managers, and the broader financial industry in Luxembourg.
This regulatory update provides information on the members of the Investment Fund Managers Committee, which is relevant for investment management and wealth management firms. It also touches on topics related to authorization, prudential requirements, and governance, which are important for these types of firms.
This regulatory update from the CSSF in Luxembourg is relevant for investment management firms domiciled in Luxembourg. It provides information on the procedures for management notifications and de-notifications when using the European passport, which is an important authorization and licensing requirement for these...
This regulatory update from the CSSF provides information on a notification form for updating payment institutions and electronic money institutions' information, which is relevant for payment providers.
This is a warning from the CSSF about fraudulent activities misusing the name of JPMorgan Asset Management (Europe) S.à r.l., an investment management firm. It involves identity theft, illicit activities, and impersonation, which pose risks to consumers and the financial sector.
This regulatory update from the CSSF in Luxembourg relates to the public register of the audit profession, which is relevant for banking, investment management, and wealth management firms operating in Luxembourg. The key topics covered are reporting, authorization, and governance requirements.
This is a warning from the CSSF regarding a fraudulent website impersonating a legitimate electronic money institution, VIVID MONEY S.A. The warning covers identity theft and illicit activities, which are relevant to AML/financial crime and consumer protection.
Table listing the professional activities and the mandates performed
AI Analysis
This CSSF publication is an updated table (in XLSX format) listing standardized professional activities and mandates for members of the management body/governing body and conducting officers, as required under points 105 and 107 of Circular CSSF 18/698. It matters because it ensures consistent, transparent reporting of senior personnel roles in Luxembourg investment fund managers (IFMs), supporting governance, conflict-of-interest management, and CSSF supervisory oversight. Compliance professionals must use this list to standardize disclosures in authorization files and ongoing reporting.
Key dates
23 August 2018
- Publication of underlying Circular CSSF 18/698, setting baseline requirements
14 January 2019
- Original publication of the list
12 March 2026
- Latest update to the list, requiring immediate review and integration into reporting processes[Source URL]
End of May (post Deadline
financial year); - Compliance deadline for Circular 18/698 obligations, including governance reporting (e.g., 5 months after year-end)
Suggested considerations
Download and use the XLSX table: Incorporate the exact list of activities/mandates into internal templates for reporting management body and conducting officer roles[Source URL].
Update authorization and notification files: Include detailed CVs, criminal record extracts, wealth declarations, and organization charts for relevant personnel/shareholders; notify CSSF of changes (e.g., qualifying holdings, guarantees).
Conduct fit-and-proper assessments: Ensure declarations cover all listed mandates, demonstrating no conflicts and adequate resources; perform initial/ongoing due diligence on delegates.
Annual compliance review: Document roles in compliance monitoring plans, training, and reporting to senior management/CSSF; align with delegate oversight (e.g., risk-based monitoring of compliance, audit functions).
Policy updates: Revise governance policies to reflect the updated list, including AML/CFT officer designations and own funds proofs.
What changed
The document was originally published on 14 January 2019 and updated on 12 March 2026, reflecting revisions to the predefined list of professional activities and mandates[Source URL].
Alignment with Circular CSSF 18/698 requirements for IFMs (management companies for UCIs and AIFs), specifying reportable roles like those in collective portfolio management, risk management,...
Emphasis on detailed documentation of mandates to demonstrate fitness, properness, and avoidance of conflicts, including for shareholders with qualifying holdings.
No entirely new requirements introduced, but the update likely incorporates evolving governance expectations, such as enhanced delegate oversight and AML/CFT compliance officer designations.
Compliance impact
Urgency: High – The March 12, 2026 update coincides with today's date, demanding immediate review to avoid supervisory findings during CSSF inspections or authorization processes. Non-compliance risks authorization delays, fines, or reputational damage, as Circular 18/698 emphasizes robust governance in a heightened scrutiny environment for IFMs (e.g., delegate oversight, AML).
This regulatory update provides information on the global situation of undertakings for collective investment in Luxembourg at the end of January 2026. It covers topics related to investment management, reporting, and licensing, which are relevant for asset managers and wealth managers.
This is a monthly statistical update on UCIs (Undertakings for Collective Investment) published by the CSSF, the financial regulator in Luxembourg. It is informational in nature and does not appear to require any immediate action, hence the low urgency level.
This regulatory update from the CSSF in Luxembourg provides monthly statistics on issuers of securities whose home Member State is Luxembourg. It is informational in nature and covers topics related to reporting, licensing, and prudential requirements for banks, asset managers, and broker-dealers operating in...
This regulatory update from the CSSF provides statistics on the origin of UCI (Undertakings for Collective Investment) initiators in Luxembourg. This is relevant for investment management and wealth management firms operating in Luxembourg, as it provides insights into the market composition.
This regulatory update from the CSSF provides information on the investment policy breakdown of Undertakings for Collective Investment (UCIs) in Luxembourg. It is relevant for investment management firms, banks, and wealth managers that operate or invest in Luxembourg-domiciled funds.
Administrative sanction imposed on a réviseur d’entreprises agréé
AI Analysis
The CSSF imposed an administrative sanction on 2 December 2025 against an approved statutory auditor (*réviseur d’entreprises agréé*) for breaches of professional obligations, likely related to continuing education requirements under Luxembourg's Audit Law, mirroring patterns in recent similar cases. This enforcement action underscores the CSSF's rigorous oversight of audit professionals, emphasizing compliance with ongoing training mandates to maintain audit quality and market integrity. Compliance professionals should note it as evidence of heightened scrutiny on non-delegable professional duties.
Key dates
31 December 2024 Deadline
- Likely reference period end for continuing education non-compliance (inferred from identical prior case)
2 December 2025
- Date of administrative sanction imposition by CSSF
6 March 2026
- Publication date of the sanction notice (today's date, aligning with CSSF practice for transparency under Article 48(2) of the Audit Law)
Suggested considerations
Immediate self-audit: Statutory auditors must verify personal compliance with continuing education hours under CSSF Regulation N°16-10, documenting hours against Article 3(1) requirements and submitting evidence if requested.
Remediation plan: If shortfalls identified, complete deficit training promptly and notify CSSF of corrective measures, as seen in related governance cases where entities implemented remediation.
Internal training programs: Audit firms should enhance monitoring of auditor CPE (continuing professional education) logs, integrating CSSF controls akin to Article 10 of the Audit Law.
Fit-and-proper reviews: Boards and compliance officers assess auditor qualifications, escalating any gaps to CSSF per professional obligations.
Record retention: Maintain verifiable CPE records for at least the reference period plus CSSF inspection windows (typically 3-5 years).
What changed
This is not a regulatory change or new requirement but an enforcement action applying existing rules under point f) of Article 43(1) read with point a) of Article 43(2) and Article 44 of the Law of 23 July 2016 on the audit profession (Audit Law), alongside CSSF Regulation N°16-10 on continuing education.
Compliance impact
Urgency: Medium. This matters as a signal of CSSF's proactive controls on auditor CPE, with fines starting at EUR 1,500 for initial breaches but scaling with severity/duration; repeated actions (e.g., multiple 2025 sanctions) indicate rising enforcement tempo, risking broader audit ecosystem scrutiny. Affected parties face direct fines and reputational harm, while others must prioritize CPE to avoid chain-reaction liabilities in financial reporting.
Administrative sanction imposed on a réviseur d’entreprises agréé
AI Analysis
The CSSF imposed an administrative sanction on 2 December 2025 against an approved statutory auditor (*réviseur d’entreprises agréé*) for breaches of professional obligations, likely related to continuing education requirements under Luxembourg's Audit Law, mirroring patterns in recent similar cases. This enforcement action underscores the CSSF's rigorous oversight of audit professionals, emphasizing compliance with ongoing training mandates to maintain audit quality and market integrity. Compliance professionals should note it as evidence of heightened scrutiny on non-compliance with minimum continuing education hours.
Key dates
31 December 2024 Deadline
- Reference period end for continuing education compliance (inferred from similar case)
2 December 2025
- Date of administrative sanction imposition by CSSF
6 March 2026
- Publication date of the sanction notice
Suggested considerations
Statutory auditors must immediately verify compliance with Article 3(1) of CSSF Regulation N°16-10, ensuring minimum continuing education hours are met for relevant periods.
Audit firms should conduct internal audits of training logs and implement remediation plans, including supplementary training if deficits exist.
All affected parties must report any identified breaches to CSSF proactively and retain evidence of corrective actions, as CSSF controls under Article 10 of the Audit Law can trigger fines.
What changed
No new regulatory changes are introduced; this is an enforcement action applying existing rules under point f) of Article 43(1) read with point a) of Article 43(2) and Article 44 of the Law of 23 July 2016 concerning the audit profession (Audit Law), alongside CSSF Regulation N°16-10 on continuing education for statutory auditors. Breaches typically involve failing to meet the minimum total hours of continuing education by the reference period end (e.g., December 31, 2024, as in a comparable August 2025 case).
Compliance impact
Urgency: Medium. This matters due to the pattern of CSSF enforcement on audit continuing education (e.g., EUR 1,500 fine in August 2025 case for similar breaches), signaling ongoing supervisory controls that could expand to on-site inspections. Non-compliance risks fines, public naming (or anonymous publication per Article 48(2) Audit Law), and reputational damage, but lacks immediate firm-wide deadlines, reducing to medium urgency for proactive reviews.
This is a warning from the CSSF regarding fraudulent websites impersonating a regulated investment firm, which poses risks of identity theft and illicit activities. It is a high-urgency issue for banks, wealth managers, and fintechs that may be targeted or impersonated by such scams.
This warning concerns a fraudulent website impersonating a legitimate investment firm, which poses risks of identity theft and illicit activities. It is relevant to banking, investment management, and wealth management firms, as well as fintechs, and requires prompt attention due to the potential for consumer harm.
This regulatory update announces the results of the 2025 professional competence examination for statutory auditors ('réviseurs d'entreprises') in Luxembourg. It is an informational update relevant for banks, wealth managers, and all firms subject to statutory audits in Luxembourg.
This regulatory update from the CSSF provides monthly statistics on notifications sent to other EEA competent authorities, primarily related to prospectuses and base prospectuses. This is informational in nature and does not appear to require immediate action, hence the low urgency classification.
This regulatory update from the CSSF provides monthly statistics on notifications received from other EEA competent authorities, primarily related to prospectuses and base prospectuses. This information is relevant for banking, investment management, and capital markets firms operating in Luxembourg and the EEA.
This regulatory update from the CSSF provides monthly statistics on the number of prospectuses approved, which is relevant for investment management firms, banks, and broker-dealers operating in Luxembourg.
The CSSF published guidance on 2 March 2026 specifying minimum documents and information required for assessing shareholding structures of authorised Investment Fund Managers (IFMs) during initial authorisation and subsequent modifications, covering both qualified and non-qualified shareholders. This matters because incomplete submissions will not be processed, potentially delaying authorisations or amendments amid ongoing CSSF scrutiny of governance and ownership in Luxembourg's fund sector.
Key dates
2 March 2026
Publication and effective date; Guidance applies immediately; incomplete applications received on/after this date will not start processing until complete
Suggested considerations
Review Guidance: Download and study the XLSX document (Version 1.0) detailing per-shareholder/per-change requirements.
Prepare Complete Packages: For initial authorisation or amendments, compile minimum docs (e.g., IDs for beneficial owners/PEPs, group charts, financing details, MEF, fees); use *MEF templates where noted.
Submit Fully: Ensure all minimums included in future filings to avoid delays; anticipate CSSF requests for extras.
Internal Processes: Update compliance checklists, train teams on shareholder due diligence, and integrate into authorisation workflows.
What changed
- Minimum Document Requirements: Establishes a mandatory list of documents for each new shareholder candidate, differentiated by type (e.g., natural person, legal person, beneficial owner,...
Additional Mandatory Submissions: For changes involving qualified holdings (entry, increase/decrease, removal), requires updated group structure charts, MEF (in some cases), financing information,...
Enforcement Mechanism: From 2 March 2026, applications lacking these minimums are deemed incomplete, halting analysis until fully submitted.
No prior formalised list existed in this detail for IFMs, shifting from case-by-case to standardised requirements.
Compliance impact
Urgency: High – Effective immediately on publication (2 March 2026), with strict non-processing of incomplete files risking significant delays in time-sensitive authorisations/amendments. Matters for maintaining operational timelines in competitive fund markets, where CSSF oversight of IFM ownership ties to broader governance expectations (e.g., board composition, qualifications).
This CSSF guidance (Version 1.0, published 2 March 2026) specifies the minimum documents and information required for assessing shareholding structures of authorised Investment Fund Managers (IFMs) during initial authorisation or modifications involving qualified and non-qualified shareholders. It standardises submissions to ensure completeness, with incomplete applications rejected until fully provided, enhancing regulatory efficiency and scrutiny of ownership changes. Compliance professionals must prioritise this to avoid delays in authorisation processes for Luxembourg-domiciled IFMs.
Key dates
2 March 2026
Publication and immediate applicability; New guidance effective; incomplete applications received on/after this date not processed until complete
Suggested considerations
Prepare Complete Packages: For each new shareholder candidate, compile type-specific docs (e.g., ID/CV/DH/CR for direct unqualified shareholders; financing proof if indirect qualified lacks resources).
Submit Core Items: Always include updated group structure chart, MEF (template available), acquisition financing details, fee form; classify request type (e.g., prior authorisation for qualified changes).
Initial/Modification Filings: Use XLSX guidance as checklist; ensure beneficial owner verification per Circular CSSF 19/732.
Ongoing: Notify CSSF of changes; anticipate ad-hoc requests for extras like PEP declarations.
What changed
- Minimum Document Lists: Introduces detailed checklists in an XLSX format covering candidate shareholder documents (e.g., ID, CV, declarations of honour (DH), criminal records (CR) for natural...
Differentiation by Shareholder Type: Requirements vary by natural/legal person, beneficial owner, direct/indirect qualified/unqualified shareholders, and involvement in financing (e.g., "Yes, if PEP...
Other Mandatory Submissions: For qualified holding changes (entry, increase/decrease, removal), requires updated group structure charts, Market Entry Forms (MEF), financing details, and fee forms;...
Enforcement Mechanism: From 2 March 2026, incomplete submissions halt analysis until remedied; CSSF may request additional info.
Compliance impact
Urgency: High – Immediate effect from 2 March 2026 means any ongoing or planned IFM authorisation/modification applications risk delays or rejection if non-compliant, potentially disrupting fund launches or ownership restructurings in Luxembourg's key investment management hub. Matters due to standardised scrutiny on fit-and-proper ownership, aligning with AIFMD governance and reducing administrative back-and-forth.
This regulatory update from the CSSF provides quarterly statistics and analysis on investment fund managers in Luxembourg, including authorised and other investment fund managers, their assets under management, investment strategies, and cross-border activities.
amending Directives 2006/43/EC, 2013/34/EU, (EU) 2022/2464 and (EU) 2024/1760 as regards certain corporate sustainability reporting requirements and certain corporate sustainability due diligence requirements
Why this matters
This directive amends several existing EU directives related to corporate sustainability reporting and due diligence requirements. It will have a significant impact on financial firms in the banking, investment management, and wealth management sectors, requiring changes to their reporting and compliance processes.
This is a warning from the CSSF about fraudulent activities carried out by an unauthorized entity called Aisbierg Ennerstetzung Bank, which is posing as a financial services provider.
This is a warning from the CSSF about fraudulent activities by persons misusing the name of MERITUM CAPITAL, a Luxembourg-based investment management firm. The warning covers identity theft, illicit activities, and the use of unauthorized websites and email addresses.
This warning concerns a fraudulent website impersonating a legitimate investment firm, which poses risks of identity theft and illicit activities. It is a high-priority issue for banks, wealth managers, and fintechs that may be targeted or impacted by this scam.
This regulatory update from the CSSF provides standardized model articles of incorporation for UCITS funds, which is relevant for investment management firms and banks that operate UCITS funds.
This warning concerns a fraudulent website impersonating a legitimate investment management firm, which poses risks of identity theft and illicit activities. It is a high-urgency issue for firms in the banking, investment management, and wealth management sectors that need to be aware of this scam and take appropriate...
Conditions relating to the organisation of the credit institution issuing covered bonds
Why this matters
This regulatory update is about a covered bond issue programme authorisation application form, which is relevant for banking and capital markets firms. It covers authorisation and licensing requirements as well as prudential/capital considerations for banks issuing covered bonds.
Conditions specific to each covered bond issue programme
Why this matters
This regulatory update is about a covered bond issue programme authorisation application form, which is relevant for banking and capital markets firms. It covers topics related to authorisation and licensing as well as prudential/capital requirements, which are of medium importance for banks.
This regulatory update from the CSSF in Luxembourg is relevant for banks and wealth managers that are involved in the issuance of covered bonds ('lettres de gage').
This warning from the CSSF relates to potential illicit activities associated with the website www.qatari.xyz, which is not authorized to provide investment or financial services in Luxembourg. This is a high-urgency issue for banks, wealth managers, and fintechs that may be impacted by this unauthorized entity.
The CSSF has updated its FAQ on portfolio transparency requirements for UCITS ETFs, relaxing disclosure frequency from monthly to quarterly publication of detailed holdings while maintaining daily information sharing with market makers and authorized participants. This change aligns Luxembourg's regulatory framework more closely with Ireland's semi-transparent ETF approach and is designed to attract active asset managers to the Luxembourg domicile by reducing proprietary information exposure.
- Firms should implement changes promptly to ensure compliance with the new quarterly disclosure requirement
Suggested considerations
*For IFMs Managing UCITS ETFs:
*Update disclosure procedures to transition from monthly to quarterly publication schedules for detailed portfolio holdings
*Maintain daily information sharing with APs and market makers to support arbitrage mechanisms—this requirement remains unchanged
*Revise prospectuses to reflect the new quarterly disclosure frequency and confirm compliance with the 30 business-day publication window
*Document procedures for calculating the 30 business-day deadline from quarter-end
What changed
The update modifies two critical FAQ sections:
Portfolio Transparency Requirements (Question 12.1)
The CSSF has expanded and clarified its guidance to apply to all UCITS ETFs, not just actively...
Daily disclosure to market participants: Market makers and authorized participants (APs) continue to receive detailed portfolio information on a daily basis to maintain efficient arbitrage mechanisms...
Quarterly public disclosure: Investment Fund Managers (IFMs) must now publish detailed portfolio holdings to all investors at least quarterly with a maximum time lag of 30 business days (previously...
This CSSF FAQ (Version 23, updated 17 February 2026) provides interpretive guidance on the Luxembourg Law of 17 December 2010 relating to undertakings for collective investment (UCIs), covering UCITS, Part II UCIs, SIFs, and SICARs. It matters for compliance professionals as it clarifies authorisation processes, investment rules, and supervisory expectations, ensuring alignment with evolving EU frameworks like AIFMD and MiCAR. The update, effective today, addresses recent regulatory shifts including crypto-asset integration.
Key dates
20 May 2025
Related AIFM FAQ Version 24; Introduces changes relevant to UCI managers acting as AIFMs
16 January 2026
UCI Authorisation page update; Reflects ongoing CSSF expectations for approvals
04 February 2026
Crypto FAQ Version 7 update effective; MiCAR-aligned changes on crypto exposure, authorisation extensions, and depositary notifications
17 February 2026 Deadline
FAQ Version 23 update effective; Applies immediately to UCI operations, authorisations, and compliance.[User-provided content]
Suggested considerations
Review and Update Documents: Align UCI constitutive documents, investment policies, and sales documents with clarified rules on strategies, LMTs, conflicts, and risk-spreading; apply look-through for intermediaries.
Crypto-Specific: For >10% NAV exposure, apply for "Other-Other Fund-Crypto-assets" extension (custody, valuation, AML/CFT plans, expertise); notify CSSF for depositary crypto custody; implement heightened AML/CFT due diligence per FATF/Luxembourg assessments.
Authorisation/Amendments: Submit for CSSF approval on new setups, manager changes, or sub-funds (esp. SICAV multi-sub-funds with EU cross-border services).
Governance and Reporting: Ensure RC/RR demonstrate crypto risk understanding; update disclosures for investors on risks, LMTs, and fair treatment.
Ongoing Compliance: Use FAQ/Compilation for RAIFs/SIFs/SICARs/Part II UCIs; auditors/managers confirm tax-exempt status for SICARs.
What changed
- Authorisation Requirements: UCIs require CSSF approval of constitutive documents (articles, management regulations), depositary selection, and management company/AIFM applications for contractual...
Crypto-Asset Updates (aligned with separate but related FAQ Version 7): Replaces "virtual assets" with "crypto-assets" per MiCAR (EU 2023/1114); UCITS and retail AIFs (non-well-informed investors)...
Investment Policies and Liquidity Management: Funds must detail objectives, strategies, asset classes, restrictions, borrowing, and conflicts; look-through for intermediary vehicles per ESMA/AIFMD...
Risk Spreading Exemptions: Limits do not apply to OECD/EU-guaranteed securities or UCIs with comparable risk-spreading.
Depositary Role in Crypto: Luxembourg depositaries can custody crypto-assets with safeguards and CSSF notification; responsibility varies by model (depositary or MiCAR provider).
Compliance impact
Urgency: High – The update coincides with MiCAR implementation and today's release, requiring immediate review for crypto-exposed funds to avoid unauthorised strategies or AML gaps; non-compliance risks supervisory actions, authorisation delays, or investor disputes in Luxembourg's key fund domicile.
For which the CSSF is the relevant competent authority under Regulation (EU) No 236/2012 of the European Parliament and of the Council of 14 March 2012 on short selling and certain aspects of credit default swaps
Why this matters
This regulatory update from the CSSF provides a list of issuers of shares and sovereign debt for which the CSSF is the competent authority under the EU short selling regulation. This is informational content relevant for banks, broker-dealers, and asset managers operating in capital markets and investment management.
This regulatory update from the CSSF relates to the termination of the operation of a branch under the AIFMD directive, which is relevant for investment management firms and banks operating in Luxembourg.
This regulatory update from the CSSF relates to the termination of the operation of a branch under the UCITS Directive, which is relevant for investment management firms and banks operating in Luxembourg. It covers authorization and licensing requirements as well as prudential considerations.
This regulatory update from the CSSF relates to the notification requirements under the UCITS Directive, which is relevant for investment management firms and banks that offer UCITS funds.
This regulatory update from the CSSF relates to the notification requirements under Article 33 of the AIFMD, which is relevant for investment managers and wealth managers. It covers AML/financial crime compliance as well as authorization and licensing, which are critical topics for these firms.
This warning concerns fraudulent activities by an unauthorized entity, Minea Global Finance SA, which is not supervised by the CSSF and has not been granted any authorization to provide investment or financial services in Luxembourg. This poses a high risk to consumers and the financial system.
This regulatory update from the CSSF provides statistics on the origin of UCI (Undertakings for Collective Investment) initiators in Luxembourg. This is relevant for investment management and wealth management firms operating in Luxembourg, as it provides insights into the market composition.
This regulatory update from the CSSF provides information on the number of UCIs (Undertakings for Collective Investment) as of 31 December 2025. It is an informational update related to the banking and investment management sectors, covering topics such as prudential requirements, reporting, and licensing.
This is a warning from the CSSF about an unauthorized entity called 'Digital Asset Bank S.A. Luxembourg' that is operating a website at www.digitalasset-bank.com and engaging in illicit activities. This is a high urgency issue for banks, fintechs, and crypto exchanges that may be impacted by this unauthorized entity.
This CSSF FAQ (Version 2, July 2013, with updates through 24 June 2013 and 11 July 2013) provides guidance on master-feeder structures for UCITS funds under the Luxembourg Law of 12 July 2010 (the "2010 Law"), addressing financial reporting, performance disclosure, and operational requirements. It matters for Luxembourg-domiciled UCITS managers and depositaries as it clarifies compliance with UCITS Directive rules on aggregation of charges, audit irregularities, and past performance in cross-border master-feeder setups, reducing ambiguity in documentation and investor communications.
Suggested considerations
Review and amend master-feeder agreements (per Art 79(1) 2010 Law) to require masters provide charge/fee data to feeders.
Ensure financial statements/annual reports disclose irregularities in specified sections and aggregate charges with audit report caveats if periods misalign.
Update KIIDs and marketing materials for past performance compliance, disclosing conversions/material changes per Regulation 583/2010 Articles 17, 19, 35.
Implement processes for ad hoc financial statements when accounting years differ, allocating audit/preparation fees appropriately.
Monitor CSSF website regularly for FAQ updates.
What changed
- Financial reporting for aggregate charges (Art 82(2) 2010 Law): When master and feeder UCITS have different year-ends, feeder must present master charges for the same period if possible; otherwise,...
Disclosure of irregularities (CSSF Regulation 10-05 Art 27(e)): Present in notes to financial statements or "other information" section of annual report.
Past performance rules (Art 159(3)c) 2010 Law and Commission Regulation (EU) 583/2010): Feeders converting to new masters cannot refer to pre-conversion past performance; masters converting from...
Document is periodically updated; CSSF reserves right to alter positions—firms must monitor website.
Compliance impact
Urgency: low—This 2013 guidance (Version 2) is outdated relative to 2026, with no new enforcement actions noted, but remains relevant for legacy UCITS master-feeder structures under the 2010 Law. It matters for audit/financial close processes and investor disclosures to avoid CSSF scrutiny, particularly in cross-border setups where ESMA UCITS rules apply; non-compliance risks reporting errors or investor complaints.
This regulatory update from the CSSF provides monthly statistics on issuers of securities whose home Member State is Luxembourg. It is informational in nature and covers topics related to reporting, licensing, and prudential requirements for banks, asset managers, and broker-dealers operating in Luxembourg.
This regulatory update from the CSSF provides monthly statistics on notifications sent to other EEA competent authorities, primarily related to prospectuses and base prospectuses. This is informational in nature and does not appear to require immediate action, hence the low urgency classification.
This regulatory update from the CSSF provides monthly statistics on notifications received from other EEA competent authorities, primarily related to prospectuses and base prospectuses. This is informational in nature and does not appear to require immediate action, hence the low urgency classification.
This regulatory update from the CSSF provides monthly statistics on the number of prospectuses approved, which is relevant for investment management firms, banks, and broker-dealers operating in Luxembourg.
This regulatory update provides quarterly employment statistics for specialized professional financial services (PFS) firms in Luxembourg. It covers employment trends across different sectors and is likely of interest to firms operating in the banking, investment management, and wealth management industries.
This regulatory update from the CSSF provides monthly statistics on the balance sheet total and provisional net results of support PFS (Professionals of the Financial Sector) in Luxembourg.
This warning concerns a fraudulent website impersonating a legitimate financial services firm, which poses risks of identity theft and illicit activities. It is relevant for banks, wealth managers, and fintechs that may be targeted or impersonated in such scams.
Administrative sanction imposed on Corestate Capital Holding S.A.
AI Analysis
The CSSF published an administrative sanction on 6 February 2026 against Corestate Capital Holding S.A., likely for breaches in regulatory compliance such as depositary duties, oversight, or governance under Luxembourg financial laws, marking a repeat enforcement action following a prior sanction in June 2025. This matters for compliance professionals as it underscores CSSF's aggressive enforcement on alternative investment fund managers (AIFMs) and depositaries, signaling heightened scrutiny on safekeeping, oversight, and internal controls to prevent systemic risks in Luxembourg's fund sector. It highlights the regulator's willingness to impose public nominative sanctions, amplifying reputational damage alongside fines.
Key dates
20 June 2025 Deadline
- Prior administrative sanction imposed on Corestate Capital Holding S.A., indicating ongoing non-compliance issues
6 February 2026
- Publication date of the current administrative sanction on Corestate Capital Holding S.A., effective immediately as a public enforcement notice
Suggested considerations
Conduct immediate gap analysis: Review safekeeping processes for ownership verification (Article 19(8)(b) AIFM Law), ensuring transaction documentation, segregated account proofs, and full holding chain records are available at transaction points.
Enhance oversight duties: Implement risk assessments per Article 92(1) CDR 231/2013, valuation compliance checks (Article 94), and cash remittance monitoring (Article 96); appoint delegates with due diligence.
Strengthen governance: Update internal controls, procedures, and conflict-of-interest policies (e.g., director overlaps); ensure key documentation availability and evidence of controls.
Firm-wide audit: For repeat offenders like Corestate, perform root-cause analysis on prior sanctions and submit remediation plans to CSSF if inspected.
Training and reporting: Train staff on CSSF expectations; improve cooperation mechanisms to avoid AML/CFT fines for non-submission of requests.
What changed
No new regulatory changes or requirements are introduced; this is an enforcement action enforcing existing obligations under laws like the AIFM Law of 12 July 2013 (e.g., Articles 19(8), 19(9), 19(11) on safekeeping and oversight duties), the Law of 5 April 1993 on the financial sector, and Commission Delegated Regulation (EU) No 231/2013 (CDR 231/2013, e.g., Articles 92, 94, 96 on risk assessment, valuation verification, and cash flow monitoring).
Compliance impact
Urgency: High – This represents CSSF's pattern of public nominative fines (e.g., EUR 102,000 on JTC for depositary breaches, EUR 10,000 on Capitalis for AML non-cooperation), with escalation risks for repeat violations like Corestate's back-to-back sanctions. It matters due to Luxembourg's dominance in European fund assets (over EUR 5 trillion), where governance lapses can trigger outflows, license revocation, or cross-border ESMA scrutiny; firms must act preemptively to mitigate fines (typically EUR 10,000–102,000) and reputational harm from nominative publication.
Administrative sanction imposed on Corestate Capital Holding S.A.
AI Analysis
The CSSF published an administrative sanction on 6 February 2026 against Corestate Capital Holding S.A., likely imposing a fine for regulatory breaches, marking a repeat enforcement action following a prior sanction on the same entity dated 20 June 2025. This matters as it underscores CSSF's intensified supervisory scrutiny on Luxembourg-based investment managers, particularly regarding governance, asset safekeeping, and oversight duties under AIFM Law, signaling heightened enforcement risks for similar firms. Compliance teams should review it for patterns in depositary and transparency violations evident in recent CSSF cases.
Key dates
20 June 2025
- Prior administrative sanction imposed on Corestate Capital Holding S.A
6 February 2026
- Publication date of the current administrative sanction on Corestate Capital Holding S.A
Suggested considerations
Conduct immediate gap analysis on depositary functions: Verify ownership chains, transaction documentation, segregated account reconciliations, and custodian delegations per AIFM Law Articles 19(8) and 19(11).
Enhance oversight processes: Implement risk assessments for AIF strategies, valuation policy checks, and cashflow monitoring per CDR 231/2013 Articles 92, 94, and 96.
Strengthen governance: Review internal controls, procedures, and conflicts (e.g., director overlaps with affiliates); ensure availability of control evidence.
For issuers like Corestate: Confirm compliance with half-yearly financial reporting and dissemination under Transparency Law Article 4.
Firm-wide: Perform mock CSSF on-site inspections focusing on 2022-2025 periods, given inspection timelines in recent cases.
What changed
No new regulatory changes or requirements are introduced; this is an enforcement action highlighting non-compliance with existing obligations under Luxembourg's AIFM Law (notably Articles 19(8), 19(9), 19(11), and 51) and related delegated regulations like CDR 231/2013. Key breaches from analogous recent CSSF sanctions include inadequate safekeeping of assets (e.g., missing ownership verification and records), failure to oversee AIFM valuation policies and cash remittance timelines, improper delegation to custodians without due diligence, and weak internal governance such as conflicts of...
Compliance impact
Urgency: High – This represents repeat enforcement on Corestate (second sanction in under a year), aligning with CSSF's pattern of nominative publications for severe, ongoing breaches in depositary and governance areas, as seen in JTC (EUR 102,000 fine for similar safekeeping/oversight failures) and BigRep SE (EUR 10,000 for reporting lapses). It elevates risks of fines, reputational damage, and market jeopardy assessments under AIFM Law Article 51, urging preemptive remediation amid CSSF's active 2023-2026 inspection cycle.
This regulatory update lists fund units subject to the EuVECA regulation, which is relevant for investment management firms and capital markets participants. The update covers authorization and licensing requirements as well as reporting obligations for these funds.
This regulatory update provides a list of fund units subject to the European Long-Term Investment Funds (ELTIFs) regulation, which is relevant for investment management and wealth management firms that offer or manage such funds.
This is an update to a regulatory form related to the notification and change of particulars for tied agents, which is relevant for investment management and wealth management firms.
This regulatory update announces the reappointment of the Director General of the CSSF, the financial regulator in Luxembourg. It is relevant for banks and wealth managers operating in Luxembourg as it signals continuity in the leadership and oversight of the regulator.
The Commission de Surveillance du Secteur Financier (CSSF) has updated its FAQ on crypto-asset investments by undertakings for collective investment, effective February 4, 2026, to align with the EU's Markets in Crypto-Assets Regulation (MiCAR). This update establishes clear investment limits and licensing requirements for UCITS and AIFs investing in crypto-assets, fundamentally reshaping how Luxembourg-regulated funds can structure crypto exposure.
Key dates
4 February 2026 Deadline
- FAQ Version 7 effective date; MiCAR compliance requirements become operative
1 July 2026 Deadline
- Deadline for Virtual Asset Service Providers (VASPs) to transition from registration to authorization under MiCAR or cease operations
Suggested considerations
*For UCITS Managers:
by-case assessment of crypto-asset investment impact on fund risk profiles
specific risks (volatility, liquidity, technological risk)
asset investments
*For AIFMs Managing AIFs with Crypto Exposure:
What changed
The regulatory framework introduces several material modifications:
Investment Exposure Limits
UCITS may invest indirectly in crypto-assets for a maximum of 10% of their net asset value (NAV). These indirect investments are restricted to transferable securities that do not embed derivatives. AIFs open to retail investors other than well-informed investors face the same 10% NAV ceiling.
MiCAR Alignment
The FAQ modifications directly reflect the entry into force of Regulation (EU) 2023/1114 on markets in crypto-assets.
This is a warning from the CSSF regarding an unauthorized entity, Castleforbes Wealth Limited, that is allegedly providing investment services without proper authorization in Luxembourg.
Administrative sanction imposed on Genève Invest (Europe) S.A.
AI Analysis
The CSSF imposed an administrative sanction on 23 July 2025 against Genève Invest (Europe) S.A., a Luxembourg-regulated entity, for breaches of professional obligations, as detailed in a publication released on 4 February 2026. This enforcement action underscores the CSSF's focus on robust internal controls and compliance with investment rules, serving as a warning to investment firms on the consequences of organizational and conduct failures. Compliance professionals should note it as evidence of heightened CSSF scrutiny on fund managers handling client assets and counterparties.
Key dates
23 July 2025
- Date of administrative sanction imposition on Genève Invest (Europe) S.A
4 February 2026
- Publication date of the sanction document by CSSF
Suggested considerations
Immediate review of counterparty due diligence: Verify licenses and financial stability of brokers/prime brokers; cease deposits with unauthorized or suspended entities per UCI Law Article 41.
Enhance valuation and accounting controls: Ensure assets (e.g., cash deposits) are valued at probable realization value per Article 28(4) UCI Law and prospectus terms; implement automated monitoring for ongoing compliance.
Conduct internal audits: Assess organizational requirements, investment policies, and conduct rules (CSSF Regulation 10-04); remediate gaps proactively, as seen in mitigated sanctions for cooperative firms.
Update governance and reporting: Document risk assessments and report prior breaches to CSSF to demonstrate cooperation, potentially reducing fine severity.
What changed
This is not a regulatory change or new requirement but an enforcement action highlighting existing obligations under Luxembourg law. Key breaches likely mirror patterns in recent CSSF sanctions, such as non-compliance with UCI Law provisions on investment policies (e.g., Articles 41, 43), sound accounting procedures (Article 109), and rules of conduct (Articles 111, CSSF Regulation 10-04), including improper cash deposits with unauthorized brokers and inaccurate asset valuation.
Compliance impact
Urgency: High – This sanction, published today (4 February 2026), signals ongoing CSSF off-site and on-site probes into fund operations, similar to fines imposed in July 2025 on Zeus Asset Management (€18,136 for UCI breaches) and a bank (reprimand for AML gaps). It matters due to escalating enforcement—fines calibrated to turnover (e.g., 10% in Zeus case)—and risks of reputational damage, especially for wealth managers with broker exposures. Non-compliance could trigger investigations, as CSSF considers infringement duration, cooperation, and history.
The CSSF has released Version 7 of its FAQ on Crypto-Assets for Undertakings for Collective Investment, updated on February 4, 2026, to reflect the entry into force of the Markets in Crypto-Assets Regulation (MiCAR). This guidance establishes binding investment limits, authorization requirements, and risk management standards for UCITS and AIFs investing in crypto-assets, fundamentally reshaping how Luxembourg-regulated collective investment schemes can engage with digital assets.
Key dates
February 4, 2026
- FAQ Version 7 effective date (entry into force of MiCAR alignment)
July 1, 2026 Deadline
- Deadline for Virtual Asset Service Providers (VASPs) to transition to CASP authorization or cease operations
No specific implementation grace period
- The FAQ does not specify a transition period for existing funds exceeding the 10% limit; firms should clarify this with the CSSF immediately
Suggested considerations
*Immediate Compliance Steps:
*Portfolio Audit: Conduct a comprehensive review of all UCITS and AIF holdings to identify current and potential crypto-asset exposures, both direct and indirect (including derivatives with crypto underlyings).
*Investment Policy Updates: Revise fund documentation, prospectuses, and investment policies to reflect the 10% NAV limits and MiCAR compliance requirements.
*Risk Management Assessment: Update risk management policies to address crypto-asset volatility, liquidity, and technological risks, with case-by-case impact assessments on fund risk profiles.
*Investor Notification: Ensure transparent and timely communication with investors regarding any crypto-asset investments or policy changes.
What changed
The most significant regulatory modifications in Version 7 include:
Investment Limits for UCITS
UCITS may invest indirectly in crypto-assets for a maximum of 10% of their net asset value (NAV). These indirect investments are limited to transferable securities that do not embed derivatives in accordance with Article 10 of the Grand-ducal Regulation of 8.
Investment Limits for AIFs
AIFs open to retail investors other than well-informed investors may invest in crypto-assets for a maximum of 10% of their NAV.
This regulatory update relates to the Luxembourg Law on alternative investment fund managers, which is relevant for investment management and wealth management firms operating in Luxembourg.
This regulatory update from the CSSF provides information on the processing times for initial authorisations of regulated investment vehicles, including UCITS funds, SIFs, and PIILs. This is relevant for asset managers and wealth managers seeking to obtain authorisation for new investment funds.
Administrative sanction imposed on a registered alternative investment fund manager (“AIFM”)
AI Analysis
The CSSF imposed an administrative fine of EUR 10,000 on registered alternative investment fund manager (AIFM) C5 S.à r.l. on 11 September 2025 for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, despite reminders, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores the CSSF's strict enforcement of AML reporting duties and serves as a warning to supervised entities on the consequences of non-compliance with supervisory requests. It matters because it demonstrates the CSSF's willingness to publish names and impose fines for procedural lapses, potentially signaling increased scrutiny on AIFMs' AML/CFT obligations amid broader regulatory focus on financial crime risks.
Key dates
4 April 2025 Deadline
- Deadline for submission of the annual financial crime questionnaire covering the year ending 31 December 2024
11 September 2025
- Date CSSF imposed the EUR 10,000 administrative fine on the AIFM for non-submission
9 January 2026
- Publication date of the sanction decision
30 January 2026
- Publication of the queried sanction notice (noting minor title discrepancy possibly referencing a separate but analogous case).[user provided]
Suggested considerations
Immediate verification: Confirm timely submission of 2025 financial crime questionnaire (likely due April 2026 for 2025 data); review internal processes for CSSF reminders and automate alerts.
Procedural enhancements: Implement robust tracking systems for supervisory questionnaires, designate a responsible senior manager for AML cooperation, and document all responses or justifications for delays.
Training and testing: Conduct firm-wide training on AML/CFT Law Article 5(1) obligations; perform mock audits of reporting workflows, especially for registered AIFMs managing non-CSSF authorized funds.
Engagement protocol: Respond promptly to CSSF reminders; request in-person meetings if needed before fines escalate; review cooperation history to mitigate fine severity.
Policy updates: Align with CSSF Circular 25/894 for expanded AIFM reporting on unauthorized funds (notification within 10 working days for registered AIFMs).
What changed
This is not a regulatory change or new requirement but an enforcement precedent highlighting existing obligations under the AML/CFT Law:
Mandatory annual submission of the CSSF financial crime questionnaire by supervised entities, including registered AIFMs, as part of the cooperation duty in Article 5(1).
Fines determined per Article 8-4(1), (2)(f), and (3)(a), considering circumstances under Article 8-5(1), with publication assessed for proportionality under Article 8-6(1).
No new rules introduced;...
Compliance impact
Urgency: High – This sanction, though modest at EUR 10,000, exemplifies CSSF's proactive use of fines and public naming for AML reporting failures, with potential for higher penalties up to EUR 500,000 or 0.5% of turnover. It heightens risks for registered AIFMs amid CSSF's 2025-2026 priorities on financial crime, sanctions, and expanded reporting (e.g., Circular 25/894), where procedural lapses can trigger investigations, reputational damage, and barriers to remediation. Firms must prioritize to avoid escalation, especially post-publication on 30 January 2026.
This regulatory update from the CSSF introduces a new dedicated data entry form for investment firms to update their information, including changes to entity details, services, management, shareholders, and other key functions.
This is an informational update on the members of the Consultative Committee for Prudential Regulation, which is relevant for banks, asset managers, and wealth managers from a prudential, operational resilience, and authorization perspective.
This regulatory update announces the updated list of members of the Consultative Committee for the Audit Profession, which is relevant for banking, investment management, and wealth management firms that are subject to audit requirements.
This is an informational update on the members of the Capital Markets Committee, which is relevant for banking and capital markets firms. The update covers governance and authorization aspects.
This regulatory update provides information on the list of members of the Board, which is relevant for banking, investment management, and wealth management firms that are subject to oversight by the CSSF.
This regulatory update provides information on the updated list of members of the Executive Board, which is relevant for banking, investment management, and wealth management firms that operate in Luxembourg and are subject to CSSF oversight.
This regulatory update from the CSSF (Luxembourg financial regulator) provides information about the public register of the audit profession, which is relevant for banking, investment management, and wealth management firms operating in Luxembourg.
This regulatory update is focused on the money laundering and terrorist financing risks associated with trust and company service provider (TCSP) activities within the financial sector in Luxembourg. It requires firms providing these services to integrate the findings and recommendations into their AML/CFT frameworks.
This regulatory update from the CSSF relates to a product intervention measure taken by the German regulator BaFin regarding turbo certificates. It impacts the marketing, distribution and sale of these products to retail clients in Germany, which is relevant for banking, investment management and capital markets firms...
This regulatory update from the CSSF focuses on the ML/FT risk assessment of specialized professionals in the financial sector providing corporate services, such as trust and company service providers. This is relevant for banks, wealth managers, and family offices that may offer these types of services.
The CSSF's January 2026 enforcement report documents the results of its 2025 examination campaign on 2024 financial and non-financial disclosures by issuers under Luxembourg's Transparency Law. This publication is critical for compliance professionals because it reveals systematic compliance gaps across financial reporting (IFRS), sustainability reporting (ESRS), and Alternative Performance Measures (APMs), with 27% of enforcement decisions resulting in injunctions for non-compliance.
Key dates
5 December 2024
- CSSF published enforcement priorities press release for FY2024 reporting
- CSSF published full results of fact-finding exercise on ESRS reporting
January 2026
- CSSF published enforcement results report (current publication)
Suggested considerations
*Financial Information (IFRS):
*Enhanced Note Disclosures: Provide sufficient disaggregation and additional information in financial statement notes for material amounts and variances, particularly where information is not presented on the face of primary statements. The CSSF emphasizes compliance with paragraph 112(c) of IAS 1.
*Cash Flow Statement Presentation: Ensure cash flows are presented on a gross basis (not net), exclude non-cash transactions, and disclose restricted cash balances with accompanying management commentary as required by paragraph 48 of IAS 7.
*Segment Reporting Completeness: Clearly disclose all income and expense items in segment reporting, even when not separately provided to or reviewed by the Chief Operating Decision Maker (CODM), if they are included in reported segment results.
*Going Concern Assessment: Maintain high transparency regarding accounting policies and judgments applied when classifying going concern assumptions.
What changed
The regulatory landscape has evolved significantly with the introduction of new sustainability reporting requirements:
ESRS Implementation (First Year): 2024 marked the first full reporting year under the European Sustainability Reporting Standards (ESRS), with the CSSF conducting a fact-finding exercise to assess...
Taxonomy Disclosures Amendment: On 4 July 2025, the European Commission adopted a Delegated Act amending the Taxonomy Disclosures as part of the Omnibus package, affecting Article 8 of the Taxonomy...
Double Materiality Assessment (DMA) Focus: The CSSF emphasized the importance of issuers not only disclosing the results of their DMA but also explaining the process itself, including granular...
relating to the fees to be levied by the Commission de Surveillance du Secteur Financier
Why this matters
This regulatory update relates to the fees levied by the Luxembourg financial regulator CSSF, which is relevant for banks, asset managers, and wealth managers operating in the Luxembourg financial sector.
Circular CSSF 19/708 mandates the electronic transmission of specified documents to the CSSF via secure platforms like e-file or SOFiE, effective from February 1, 2019, replacing prior paper or other methods. This updated annex (as amended by Circular CSSF 21/790 and further revisions up to April 1, 2025) standardizes submissions for investment funds and related entities, reducing administrative burdens while ensuring document integrity and CSSF accessibility. Compliance professionals must monitor the dynamic annex list on the CSSF website to avoid nullified submissions.
Key dates
28 January 2019
Publication date; of original Circular CSSF 19/708
1 February 2019
Entry into force; Mandatory electronic transmission for listed documents; non-electronic submissions null and void
22 December 2021
Amendment; by Circular CSSF 21/790
1 April 2025
Latest annex update; noted
Ongoing Deadline
Regular checks required; Entities must monitor CSSF website for annex updates
Suggested considerations
Register/access e-file or SOFiE platforms if not already (test/production environments available since February 2019).
Consult and adhere to the latest Annex I for document list, nomenclatures, and formats (PDF with full functionality).
Ensure submissions are final/official versions matching hard copies; use specified identifiers for UCIs/SIFs/SICARs.
Implement processes for automatic/manual transmission (e.g., via updated sending services v4.9.0 or transmission module 6.6.0).
Train staff on responsibilities and integrate into reporting workflows; reference CSSF FAQs for closing documents.
What changed
- Mandatory Electronic-Only Submission: Documents listed in Annex I must be transmitted exclusively via e-file (http://www.e-file.lu) or SOFiE...
Dynamic Annex Updates: The annex, published on the CSSF website, is regularly updated (e.g., latest noted April 1, 2025) and includes prospectuses, management regulations, annual reports, risk...
Scope Expansion: Extends beyond UCIs to securitisation undertakings (2004 Law), pension funds (2005 Law), SICARs, and Luxembourg IFMs; repeals prior Circulars CSSF 09/423 and 08/371.
Filer Responsibilities: Entities ensure documents match official final hard copies, handle content/format accuracy, and check annex updates regularly.
Compliance impact
Urgency: Low (for new implementations post-2019; medium for ongoing monitoring). This matters for operational efficiency and CSSF relations, as non-compliance risks rejected filings, delays (e.g., approvals under SFDR processes), or supervisory scrutiny, but long-standing rule (since 2019) with established platforms reduces immediate pressure. Firms must prioritize annex vigilance to avoid disruptions in routine reporting like annual reports or prospectuses.
This regulatory update relates to the registration of EU/EEA mortgage credit intermediaries operating in Luxembourg under the freedom to provide services, which is relevant for banking, credit, and mortgage lending firms.
This CSSF publication, dated January 12, 2026, identifies the specific population (likely a firm or individual) subject to an enforcement action, such as an administrative sanction, as part of the CSSF's transparency in supervisory measures. It matters because it signals CSSF's active enforcement priorities, potentially in areas like AML or reporting failures, enabling firms to assess similar risks in their operations and strengthen compliance to avoid parallel actions. Published amid rising focus on financial crime typologies like sexual extortion, it underscores the regulator's commitment to public accountability.
Suggested considerations
For the named population: Comply with any sanction terms (e.g., pay fines, implement remediation plans, or cease certain activities), and report to CSSF as required; appeal if applicable under Luxembourg administrative law.
Update internal policies, train staff on enforcement precedents, and ensure robust reporting under Circular CSSF 19/726 or Transparency Law obligations.
What changed
No new regulatory changes or requirements are introduced in this publication, as it is an enforcement notice rather than a circular or guideline. It serves as a disclosure of an ongoing or concluded enforcement case, aligning with CSSF's practice of publishing sanction details to deter non-compliance and inform the market, without altering existing rules.
Compliance impact
Urgency: High – Immediate relevance for the named party facing direct consequences; medium-to-high for peers due to CSSF's pattern of public enforcements signaling heightened scrutiny on financial crime, especially amid rising OCSE/FSEC cases noted in recent CSSF guidance. It matters as it could preview broader supervisory sweeps, impacting reputation, operations, and costs if similar vulnerabilities exist.
amending Delegated Regulation (EU) 2016/1675 to add Russia to the list of high-risk third countries with strategic deficiencies
Why this matters
This regulation amends the list of high-risk third countries, which has implications for AML/CFT compliance, prudential requirements, and authorization/licensing for firms operating in the banking, investment management, and wealth management sectors.
Administrative sanction imposed on the alternative investment fund manager Premium Capital Management (“AIFM”)
AI Analysis
The CSSF imposed a €10,000 administrative fine on 11 September 2025 against alternative investment fund manager (AIFM) Premium Capital Management for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores the CSSF's strict enforcement of AML reporting duties, signaling heightened scrutiny on timely supervisory cooperation amid ongoing AML risks in Luxembourg. Compliance teams should view this as a reminder of the low tolerance for even administrative lapses, with potential for escalated fines in repeat cases.
Key dates
31 December 2024
- Reference year-end for the financial crime Questionnaire
4 April 2025 Deadline
- Statutory deadline for Questionnaire submission to CSSF
11 September 2025
- Date CSSF imposed the €10,000 administrative fine after non-submission despite reminders
9 January 2026
- Publication date of the sanction decision
Suggested considerations
Immediately review internal processes for annual Questionnaire submission, ensuring calendar invites and automated reminders for the 4 April deadline (covering prior year-end data).
Conduct a gap analysis on AML/CFT cooperation obligations under Article 5(1), including response protocols to CSSF reminders or queries.
Update compliance calendars and train staff on escalation procedures; document all submissions with proof (e.g., timestamps, acknowledgments).
For AIFMs: Verify CSSF registration status under Article 3(2) of the 12 July 2013 AIFM Law and align with broader AML duties.
If late, proactively submit overdue items and request meetings if needed, as non-response forfeits mitigation opportunities.
What changed
This is not a regulatory change but an enforcement precedent under existing rules: non-compliance with Article 5(1) of the AML/CFT Law, which mandates annual submission of a financial crime questionnaire ("Questionnaire") to the CSSF. The fine was calculated per Articles 8-4(1), 8-4(2)(f), and 8-4(3)(a), considering circumstances under Article 8-5(1). Publication followed Article 8-6(1) after a proportionality assessment, confirming no market stability risks.
Compliance impact
Urgency: Medium – This €10,000 fine for a straightforward reporting failure demonstrates CSSF's willingness to penalize non-cooperation swiftly, even without aggravating factors, but the amount is modest and targeted at administrative breaches. It matters as a warning shot in Luxembourg's AML landscape, where repeated failures could trigger higher fines (up to proportionality limits under Article 8-5), reputational damage via public naming, or supervisory escalations; firms should audit 2025/2026 reporting now to preempt similar actions, especially post-NRA updates.
Administrative sanction imposed on the alternative investment fund manager Sunbricks GP S.à r.l. (“AIFM”)
AI Analysis
The CSSF imposed a **€10,000 administrative fine on Sunbricks GP S.à r.l.**, an alternative investment fund manager, for failing to submit a mandatory annual financial crime questionnaire by the April 4, 2025 deadline, despite two formal reminders. This enforcement action demonstrates the CSSF's strict approach to cooperation obligations under Luxembourg's anti-money laundering and counter-terrorist financing (AML/CFT) framework and signals that non-submission of required compliance documentation—even without evidence of underlying financial crime—triggers regulatory penalties.
Key dates
April 4, 2025 Deadline
– Annual financial crime questionnaire submission deadline (for year ending December 31, 2024)
Before September 11, 2025
– Two reminder notices issued by CSSF to Sunbricks GP
September 11, 2025
– Administrative fine decision date; questionnaire still not submitted
January 9, 2026
– Publication date of enforcement decision
Suggested considerations
regulated entities must:
*Establish Calendar Controls: Implement internal compliance calendars flagging the April 4 annual questionnaire submission deadline with sufficient lead time (minimum 4-6 weeks before deadline)
*Designate Responsible Parties: Assign clear ownership for questionnaire completion and submission, with backup contacts
*Prepare Documentation: Maintain contemporaneous records of financial crime controls, suspicious activity reporting, and compliance activities throughout the year to support accurate questionnaire responses
*Monitor Communications: Ensure all CSSF correspondence is tracked and escalated immediately; do not ignore reminder notices
What changed
This is not a regulatory change but rather an enforcement action clarifying existing obligations:
Mandatory Annual Questionnaire Requirement: All professionals supervised, authorized, or registered by the CSSF must submit an annual questionnaire on financial crime by April 4 each year, covering...
Cooperation Obligation: Article 5(1) of the amended Law of 12 November 2004 on AML/CFT establishes a non-negotiable duty to cooperate with the CSSF, which includes timely submission of requested...
Administrative Fine Framework: The CSSF applies Article 8-4 of the AML/CFT Law to impose fines for non-compliance, with amounts determined under Article 8-5 based on all relevant circumstances.
Administrative sanction imposed on the alternative investment fund manager Capitalis Premiere Group (“AIFM”)
AI Analysis
The CSSF imposed a €10,000 administrative fine on alternative investment fund manager (AIFM) Capitalis Premiere Group on 11 September 2025 for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, despite two reminders, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores the CSSF's strict enforcement of AML reporting duties, signaling heightened scrutiny on timely supervisory cooperation for Luxembourg-regulated entities. Compliance teams should note this as a low-value but public reminder of potential fines for administrative lapses in AML processes.
Key dates
4 April 2025 Deadline
- Deadline for submitting the annual financial crime questionnaire covering the year ending 31 December 2024
11 September 2025
- Date CSSF imposed the €10,000 administrative fine on Capitalis Premiere Group for non-submission
9 January 2026
- Date of CSSF publication of the sanction decision
Suggested considerations
Ensure timely submission of annual financial crime questionnaires by 4 April each year (for prior calendar year data); implement calendar reminders and escalation processes for CSSF requests.
Respond promptly to CSSF reminders or queries on AML/CFT compliance to avoid escalation to fines; document any delays with justification evidence.
Review internal AML cooperation protocols, including governance for questionnaire completion, and train staff on Article 5(1) obligations; consider requesting in-person meetings if disputing CSSF demands.
No retroactive actions needed for this case, but conduct gap analysis on reporting workflows to prevent similar breaches.
What changed
This is not a regulatory change or new requirement but an enforcement precedent under existing rules: non-compliance with the annual financial crime questionnaire submission, mandated by Article 5(1) of the AML/CFT Law, triggers fines per Articles 8-4(1), 8-4(2)(f), and 8-4(3)(a). The CSSF considered all relevant circumstances under Article 8-5(1) to set the €10,000 fine amount and published the sanction nominatively after proportionality assessment per Article 8-6(1), confirming no market stability risks.
Compliance impact
Urgency: Medium - This €10,000 fine is modest but publicly names the firm, amplifying reputational risk in Luxembourg's competitive fund domicile; it matters as a clear CSSF signal of zero tolerance for basic cooperation failures in AML, potentially foreshadowing stricter enforcement amid EU AML harmonization pressures. AIFMs face ongoing annual risk, with non-response despite reminders treated as willful breach; firms with weak reporting controls should prioritize fixes to avoid cumulative fines or escalations.
Administrative sanction imposed on the alternative investment fund manager Lion Management (“AIFM”)
AI Analysis
The CSSF imposed a €10,000 administrative fine on Lion Management, an alternative investment fund manager, on 11 September 2025 for failing to submit a mandatory annual financial crime questionnaire by the 4 April 2025 deadline. This enforcement action demonstrates the CSSF's commitment to enforcing cooperation obligations under Luxembourg's anti-money laundering and terrorist financing framework, with direct implications for all AIFMs regarding timely compliance with supervisory reporting requirements.
Key dates
4 April 2025 Deadline
- Deadline for submission of annual financial crime questionnaire for year ending 31 December 2024
11 September 2025
- Date CSSF imposed administrative fine after two reminders went unheeded
9 January 2026
- Publication date of the administrative sanction decision
Suggested considerations
*Establish Calendar Controls: Implement firm-wide systems to track the annual financial crime questionnaire deadline (typically 4 April for the prior calendar year)
*Designate Responsible Parties: Assign clear ownership for questionnaire completion and submission to the CSSF, with escalation procedures
*Monitor CSSF Communications: Establish protocols to immediately flag and respond to any CSSF correspondence, including reminders or requests for information
*Document Submission: Maintain evidence of timely submission (timestamps, confirmation receipts) to demonstrate compliance
*Escalate Non-Compliance Immediately: If submission cannot be met by deadline, proactively contact the CSSF to explain delays and request extensions rather than ignoring reminders
What changed
This is not a regulatory change but rather an enforcement action clarifying existing obligations. However, it reinforces critical compliance requirements:
Mandatory Annual Questionnaire Submission: All CSSF-supervised professionals, including AIFMs, must submit an annual questionnaire on financial crime by the specified deadline (in this case, 4 April...
Cooperation Obligation: Article 5(1) of the amended Law of 12 November 2004 on the fight against money laundering and terrorist financing establishes a non-negotiable obligation to cooperate with the...
Enforcement Escalation: The CSSF will issue reminders before imposing sanctions, but failure to respond to reminders results in administrative fines determined under Article 8-4 of the AML/CFT Law.
Administrative sanction imposed on the alternative investment fund manager Max Gain Capital S.à r.l. (“AIFM”)
AI Analysis
The CSSF imposed a €10,000 administrative fine on Max Gain Capital S.à r.l., an alternative investment fund manager, on 11 September 2025 for failing to submit a mandatory annual financial crime questionnaire by the April 2025 deadline. This enforcement action demonstrates the CSSF's active monitoring of AML/CFT compliance obligations and its willingness to sanction non-cooperation, even for procedural failures unrelated to substantive money laundering violations.
Key dates
4 April 2025 Deadline
- Deadline for submission of financial crime questionnaire for the year ending 31 December 2024
Before 11 September 2025 Deadline
- CSSF issued two reminders to Max Gain Capital after the missed deadline
11 September 2025
- CSSF imposed the €10,000 administrative fine
9 January 2026
- CSSF published the administrative sanction decision
Suggested considerations
regulated entities must:
*Identify Reporting Obligations: Confirm whether your firm is subject to the annual financial crime questionnaire requirement under Article 5(1) of the AML/CFT Law
*Calendar Management: Establish internal processes to ensure questionnaires are submitted by 4 April each year for the preceding calendar year
*Documentation: Maintain records demonstrating timely submission and preserve evidence of compliance
*Escalation Protocol: If unable to meet deadlines, proactively contact the CSSF to request extensions or clarification rather than ignoring reminders
What changed
This is not a regulatory change but rather an enforcement action clarifying existing obligations:
Mandatory Annual Questionnaire Requirement: All CSSF-supervised professionals must submit an annual questionnaire on financial crime covering the preceding calendar year.
Cooperation Obligation: Article 5(1) of the amended Law of 12 November 2004 on AML/CFT imposes a non-negotiable duty to cooperate with CSSF supervisory requests.
Enforcement Escalation: The CSSF will issue reminders before imposing sanctions, but continued non-compliance triggers administrative fines under Article 8-4 of the AML/CFT Law.
Administrative sanction imposed on the alternative investment fund manager Agriland Management S.A. (“AIFM”)
AI Analysis
The Commission de Surveillance du Secteur Financier (CSSF), Luxembourg's financial regulator, imposed a **EUR 10,000 administrative fine on Agriland Management S.A.**, an alternative investment fund manager, on 11 September 2025 for failing to submit a mandatory annual financial crime questionnaire by the April 2025 deadline. This enforcement action demonstrates the CSSF's commitment to enforcing cooperation obligations under Luxembourg's anti-money laundering and terrorist financing (AML/CFT) framework and signals heightened scrutiny of compliance with supervisory reporting requirements.
Key dates
4 April 2025 Deadline
– Deadline for submission of financial crime questionnaire for year ending 31 December 2024
Before 11 September 2025
– Two reminder notices issued by CSSF to Agriland Management S.A
11 September 2025
– Administrative fine imposed
9 January 2026
– Sanction published by CSSF
Suggested considerations
*Establish Reporting Calendars: Implement systems to track the 4 April annual deadline for financial crime questionnaire submissions
*Designate Responsible Personnel: Assign clear accountability for completing and submitting the questionnaire to the CSSF
*Respond to Regulatory Requests: Do not ignore CSSF reminders; engage proactively, including requesting in-person meetings if clarification is needed
*Document Justifications: If unable to meet deadlines, provide written evidence explaining the delay and proposed remediation timeline
*Monitor Supervisory Communications: Establish procedures to ensure regulatory correspondence is tracked and escalated appropriately
What changed
This is not a regulatory change but rather an enforcement action that clarifies existing obligations:
Mandatory Annual Reporting: All CSSF-supervised professionals must submit an annual questionnaire on financial crime by 4 April each year, covering the preceding calendar year.
Cooperation Obligation: Article 5(1) of the amended Law of 12 November 2004 on AML/CFT establishes a non-negotiable duty to cooperate with the CSSF, including timely submission of requested...
Enforcement Escalation: The CSSF will issue reminders for non-compliance, but continued failure to respond triggers administrative sanctions without requiring evidence of intentional misconduct.
Administrative sanction imposed on the alternative investment fund manager Bedrock I GP S.à r.l. (“AIFM”)
AI Analysis
The CSSF imposed a €10,000 administrative fine on alternative investment fund manager (AIFM) Bedrock I GP S.à r.l. on 11 September 2025 for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, despite two reminders, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores CSSF's strict enforcement of AML reporting duties and serves as a public warning to supervised entities on timely supervisory compliance. It matters because it demonstrates that even modest fines are pursued for basic reporting lapses, potentially signaling heightened scrutiny on AIFMs' AML processes amid ongoing regulatory focus on financial crime risks.
Key dates
31 December 2024 Deadline
- Reference period end for the Questionnaire covering financial crime compliance
4 April 2025 Deadline
- Statutory deadline for Questionnaire submission to CSSF
11 September 2025
- Date of administrative fine imposition (€10,000) after non-submission despite reminders
9 January 2026
- Publication date of the sanction decision by CSSF
Suggested considerations
Immediately verify submission status of the 2024 Questionnaire (or any outstanding); if overdue, submit promptly with justification to mitigate further escalation.
Implement automated calendar alerts and internal workflows for all CSSF reporting deadlines, including annual AML/CFT Questionnaire.
Conduct a compliance gap analysis on cooperation obligations under Article 5(1) AML/CFT Law, documenting reminder responses and evidence retention.
Train senior managers and compliance teams on supervisory interactions, including rights to request in-person meetings before fines.
Review governance for timely escalation of CSSF reminders to decision-makers.
What changed
This is not a regulatory change or new requirement but an enforcement of existing obligations under the amended Law of 12 November 2004 on the fight against money laundering and terrorist financing (AML/CFT Law). Specifically, it reaffirms the mandatory annual submission of the CSSF's financial crime questionnaire ("Questionnaire") by supervised professionals, including AIFMs under Article 3(2) of the Law of 12 July 2013 on AIFMs, as part of the cooperation duty in Article 5(1).
Compliance impact
Urgency: Medium - This is a post-facto enforcement on a past breach (2024 reporting cycle), with the €10,000 fine relatively low, indicating proportionality for a first-time or isolated lapse. It matters as a leading indicator of CSSF's 2025-2026 focus on AML cooperation, with multiple similar AIFM sanctions published simultaneously, risking escalated fines or reputational harm for repeat offenders; firms should prioritize reporting hygiene to avoid public naming, which CSSF deems non-disruptive to markets here.
Administrative sanction imposed on JTC (Luxembourg) S.A.
AI Analysis
The CSSF imposed a €102,000 administrative fine on JTC (Luxembourg) S.A. on 23 July 2025 for breaches in its professional obligations as a depositary of non-financial assets under the AIFM Law, identified during an on-site inspection from February 2023 to January 2024 covering activities up to December 2022. This enforcement action highlights CSSF's scrutiny of depositary functions, particularly risk assessment and oversight controls, serving as a warning for similar entities to strengthen compliance amid rising supervisory focus on AIFM depositaries.
Key dates
February 2023
January 2024; Period of CSSF on-site inspection on depositary obligations, covering activities up to December 2022
23 July 2025
Date CSSF imposed the €102,000 administrative fine on JTC (Luxembourg) S.A
9 January 2026
Date of official CSSF publication announcing the sanction
Suggested considerations
related entities) must:
Conduct immediate gap analyses on risk assessment processes for AIF strategies and AIFM organization per Article 92(1) CDR 231/2013.
Implement robust verification processes for AIFM compliance with asset delegation rules.
Ensure availability of key documentation and evidence of controls for the depositary function, addressing pre-2022 gaps if applicable.
Develop and test oversight processes, leveraging self-identified improvements and action plans as mitigating factors, as JTC did prior to inspection.
What changed
This is an enforcement action, not a regulatory change; it enforces existing requirements under Article 51(1) (1st and 7th indents) and Article 51(2) (1st sub-paragraph, 3rd indent) of the amended Law of 12 July 2013 on AIFMs (AIFM Law), and related provisions like Article 92(1) of Commission Delegated Regulation (EU) No 231/2013 (CDR 231/2013).
Compliance impact
Urgency: High – This matters due to the fine's size (€102,000), reflecting breach accumulation, severity, and duration, despite JTC's partial remediation; it signals intensified CSSF on-site scrutiny of depositary functions post-2023 inspections, with potential for higher penalties absent proactive controls. Depositaries face elevated enforcement risk, especially with unavailability of evidence pre-2022, urging swift remediation to avoid similar outcomes under Article 51 AIFM Law.
Extract from the CSSF Newsletter No 300 – January 2026
Why this matters
This regulatory update from the CSSF provides monthly statistics and main figures regarding the Luxembourg financial centre, which is relevant for banking, investment management, and wealth management firms operating in the jurisdiction.
Press release 25/21(published on 22 December 2025, updated on 31 December 2025)
Why this matters
This regulatory update is about the dissolution and judicial liquidation of ALFA ASSET MANAGEMENT (EUROPE) S.A., an investment management and wealth management firm. It involves topics related to authorization and licensing as well as prudential and capital requirements.
relating to specialised investment funds, investment companies in risk capital and undertakings for collective investment subject to Part II of the Law of 17 December 2010
AI Analysis
Circular CSSF 25/901 consolidates and modernizes the supervisory framework for Luxembourg specialised investment funds (SIFs), investment companies in risk capital (SICARs), and undertakings for collective investment subject to Part II of the Law of 17 December 2010 (Part II UCIs), including their sub-funds. It streamlines investment rules, diversification limits, borrowing, disclosures, and risk management while enhancing flexibility for sophisticated investors and formalizing prior informal guidance, reducing regulatory complexity without compromising investor protection.
Suggested considerations
Review and update fund documents (e.g., sales documents, instruments of incorporation) to include mandated disclosures on investment strategy/limits, risks, UCIs/vehicles, borrowing, liquidity tools, and retail-specific warnings.
Assess and document compliance with new/relaxed diversification, borrowing, and SICAR investment rules; apply for CSSF derogations where justified.
Ensure risk-spreading in derivatives/collateral and deployment of SICAR cash into eligible assets; confirm look-through for intermediaries.
For retail-marketed funds: Limit investments/UCIs to 25%, cap borrowing at 70%, add prominent risk warnings for illiquids/long-duration.
Maintain robust governance/documentation to leverage flexibility; reference CSSF's Compilation for concepts.
What changed
- Diversification and investment limits: Introduces tailored percentage-based thresholds; for funds marketed to unsophisticated retail investors, limits remain at 25% per issuer/UCI/asset, raised to...
SICAR-specific rules: Confirms risk capital investments (e.g., equity, mezzanine) must align with development objectives, exceed mere market risk, and deploy incoming cash into eligible assets;...
Borrowing: For retail-exposed SIFs/Part II UCIs, investment borrowing capped at 70% of assets/commitments; no hard cap for sophisticated investor funds if disclosed, with SICARs limited to risk...
Derivatives and techniques: Permits use if economically appropriate (e.g., risk/cost reduction), with risk-spreading via diversified underlyings/collateral; counterparty risk limited if...
Urgency: High – Formalizes prior informal guidance into binding rules with enhanced flexibility but stricter retail protections and disclosure mandates, requiring immediate document reviews/updates for non-compliant SIFs/SICARs/Part II UCIs to avoid supervisory scrutiny or authorization issues; critical for funds targeting private markets or retail.
Revision and remodelling of the rules to which Luxembourg undertakings governed by the Law of 30 March 1988 on undertakings for collective investment (“UCI”) are subject
AI Analysis
Circular IML 91/75, as amended up to CSSF Circular 25/901, consolidates and modernizes the supervisory framework for Luxembourg Part II UCIs, SIFs, and SICARs, refining rules on diversification, borrowing, risk-spreading, and disclosures while tailoring requirements to investor profiles. It matters because it streamlines fragmented regulations, enhances fund competitiveness, and formalizes CSSF expectations without mandating immediate changes for pre-existing funds, reducing compliance burdens while promoting transparency and flexibility. This update aligns administrative practices with market realities, repealing outdated circulars to eliminate ambiguity.
Suggested considerations
Review and update offering documents/prospectuses for enhanced transparency on risks, limits, borrowing, liquidity tools (e.g., gates, notice periods), redemption processes, and investor-specific warnings.
Align fund documentation/terminology with CSSF Compilation of key concepts for consistency in filings and communications.
Disclose ramp-up/wind-down periods, potential derogations, and life extensions clearly; seek CSSF approval for exemptions where justified.
For SICARs: Ensure risk capital investments meet modernized criteria; apply look-through for limits.
Assess portfolio compliance for new funds/compartments; leverage flexibility for sophisticated investors but maintain robust governance.
What changed
- Consolidation and Repeals: Repeals CSSF Circulars 02/80, 07/309, 06/241, and Chapters G and I of IML 91/75; renders CSSF 08/356 and Chapter H of IML 91/75 inapplicable to Part II UCIs.
Flexible Diversification Rules: Introduces investor-category-based thresholds (e.g., stricter for retail, looser for sophisticated investors); allows CSSF derogations for SIFs/Part II UCIs with...
Borrowing Limits: New limits for SIFs/Part II UCIs (e.g., 70% of net assets, excluding temporary borrowings tied to commitments); tailored by investor type.
Enhanced Disclosures: Offering documents must detail investment policies, risks (especially private equity for retail), subscription/redemption processes, liquidity tools, gates, and amendment...
SICAR Risk Capital: Modernizes definition to include equity, loans, bonds, mezzanine; clarifies direct/indirect investments with three cumulative elements (risk of total loss, no redemption rights,...
Compliance impact
Urgency: Medium – Not critical as existing funds are grandfathered with no retroactive changes required, but high relevance for new launches or material updates post-19 Dec 2025. It matters for operational efficiency (streamlined rules reduce fragmentation) and investor protection (tailored risks/disclosures), potentially lowering long-term costs while mitigating supervisory scrutiny; failure to update docs could delay approvals or trigger CSSF queries.
amending Circular CSSF 22/811.Authorisation and organisation of entities acting as UCI administrators.
AI Analysis
Circular CSSF 25/900, issued on 16 December 2025, amends Circular CSSF 22/811 to clarify governance principles, authorisation requirements, and operational standards for UCI (Undertakings for Collective Investment) administrators in Luxembourg, while reforming annual reporting obligations. It matters because it strengthens supervisory oversight, aligns with DORA for ICT outsourcing, and simplifies reporting to enhance efficiency and compliance in the fund administration sector.
Key dates
January 2025
- DORA entry into force, applying to ICT outsourcing for in-scope UCIAs
16 December 2025
- Issuance date; repeal of Annex B of Circular CSSF 22/811 effective immediately
31 December 2025
- New reporting framework (SAQ and updated modalities) applies to all financial years ending on or after this date
Suggested considerations
Assess eligibility and obtain prior CSSF authorisation via Annex A application (or notify substantial changes); ensure ongoing validity by monitoring operational model and delegations.
Adapt internal processes for revised annual UCIA reporting (SAQ-focused, integrated where applicable); submit using CSSF website instructions starting for FY ending 31 Dec 2025.
Review/update contracts with UCIs/IFMs to define roles, responsibilities, and oversight; implement delegation monitoring, remediation plans, and ICT compliance (DORA/Circular 25/882 or 20/750).
For DORA-scope entities, align outsourcing arrangements with Circular CSSF 25/882.
What changed
- Repeals Annex B of Circular CSSF 22/811 with immediate effect, replacing it with streamlined annual reporting via a core compliance-focused Self-Assessment Questionnaire (SAQ) that assesses...
Introduces prior CSSF authorisation requirements for entities acting as UCI administrators, including a defined administrative procedure with application details in Annex A; authorisation remains...
Clarifies scope for eligible entities (e.g., UCIs, IFMs, management companies under Luxembourg law) performing one or more of three UCI administration functions (defined in point 10); mandates...
Aligns ICT outsourcing with DORA (effective January 2025) for in-scope UCIAs (credit institutions, investment fund managers, investment firms, certain support professionals), referencing Circular...
Strengthens delegation rules (section 3.5): prior CSSF notification for critical/important tasks, ongoing monitoring by UCI/IFM, and remediation plans for shortcomings.
Compliance impact
Urgency: High - Immediate repeal of prior reporting Annex requires prompt process updates; new framework applies to FY 2025 year-ends (just past as of Jan 2026), risking supervisory scrutiny or penalties for non-compliance; DORA alignment adds operational resilience pressure amid ongoing CSSF focus on fund admin governance.
Authorisation and organisation of entities acting as UCI administrators
AI Analysis
Circular CSSF 22/811, as amended by Circular CSSF 25/900, establishes CSSF requirements for the authorisation, governance, internal organisation, and oversight of entities acting as UCI (Undertakings for Collective Investment) administrators in Luxembourg. It matters because it standardises practices amid regulatory, technological, and market evolutions, ensuring robust controls, risk management, and supervision for fund administration activities critical to Luxembourg's fund industry.
Suggested considerations
Submit authorisation application to CSSF with Annex A information before commencing UCI administration; notify substantial changes and keep file updated.
Establish/implement governance, controls, escalation processes, resource adequacy, ICT/business continuity per circular; ensure single provider per function.
For delegations: Conduct due diligence, execute written contracts detailing roles/obligations, notify CSSF in advance, retain oversight without delegating monitoring.
Conclude written contracts with UCI/IFM; submit annual UCIA activity reports.
UCIs/IFMs: Supervise coordinators, ensure information exchange/cooperation with administrators.
What changed
- Authorisation Requirements: Prior CSSF authorisation is mandatory for appointment as UCI administrator, via full application under sectoral laws or a simplified administrative procedure;...
Scope of UCI Administration: Defines three core functions—registrar, NAV calculation/accounting, and client communication—requiring only one designated service provider per function per UCI (or...
Governance and Controls: Mandates sound governance principles, control frameworks, escalation processes for errors/incidents, adequate resources (human, ICT), business continuity, and compliance with...
Delegation Rules: Delegation of tasks allowed but not of monitoring/oversight; requires written contracts, due diligence, and prior CSSF notification (3 months generally, 1 month for certain agents);...
Contracts and Reporting: Written contracts between UCI administrator and UCI/IFM; annual activity reporting due 5 months after financial year-end, starting from financial years ending post-30 June...
Compliance impact
Urgency: High – Non-compliance risks CSSF sanctions, as authorisation is prior and ongoing; critical for Luxembourg fund ecosystem given evolutions in tech/markets/DORA. Firms must act promptly if unauthorised or misaligned, especially with annual reporting since 2023 and DORA integration; impacts operational models, delegations, and reporting immediately for active administrators.
This regulatory update from the CSSF provides information on the global situation of undertakings for collective investment at the end of October 2025, which is relevant for investment management and wealth management firms.
Provisions relating to credit institutions and investment firms of EU origin established in Luxembourg by way of branches or exercising activities in Luxembourg by way of free provision of services
AI Analysis
Circular CSSF 07/325, as amended by Circulars CSSF 21/765, CSSF 22/827, and most recently CSSF 25/898, establishes supervisory requirements for EU credit institutions and investment firms operating in Luxembourg via branches or free provision of services (FOPS). It matters for compliance professionals as it defines CSSF's host authority role, notification obligations, reporting, and enforcement powers, ensuring alignment with CRD and MiFID II while adapting to evolving EU rules.
Key dates
One month before change effective date
- Notify CSSF and home authority in writing of programme changes (e.g., operations, services, additional places of business) per CRD Article 36(3) and MiFID II Article 35(10)
Within 3 months of receipt
- Home state authority communicates notification file to CSSF for branch/FOPS establishment
Six months after financial year
end; - Submit electronically signed SAQ (via eDesk), annual AML/CFT and conduct of business report (per Circular CSSF 19/731, to be repealed by CSSF 25/902), reviewed by REA
Suggested considerations
Notifications: Submit initial branch/FOPS notification to home authority (including operational programme); notify changes (e.g., services, locations) at least one month in advance to both home authority and CSSF.
Reporting: Complete and sign SAQ (accurate, concise, true/fair view) via eDesk within six months post-year-end; provide REA-appraised AML/CFT and conduct reports, detailing branch procedures/controls.
Supervision cooperation: Facilitate home/CSSF on-site inspections (with professional secrecy guarantees); ensure branch compliance with Luxembourg laws (e.g., LFS Article 46(2)).
Ongoing: Maintain branch infrastructure, update for legal changes, and align with CSSF user guides for eDesk authentication.
What changed
- CSSF 21/765: Updated provisions following amendments to CSSF Regulation No 12-02, refining notification and operational requirements for branches and FOPS.
CSSF 22/827: Further amendments to align with CRD and MiFID II changes, including enhanced notifications for programme alterations (e.g., one-month prior written notice for changes in operations,...
CSSF 25/898: Latest update (noted in CSSF Newsletter No 298, November 2025), incorporating recent legal/regulatory developments, such as refined reporting via eDesk portal, AML/CFT compliance...
Compliance impact
Urgency: Medium - Matters due to recurring annual reporting (e.g., SAQ, AML/CFT within six months post-year-end) and prior notifications for changes, with CSSF enforcement powers (e.g., measures under LFS Article 46(2)) for non-compliance. Recent CSSF 25/898 update (Nov 2025) requires immediate review of processes for digital submissions, but no retroactive changes or hard deadlines post-2025; grandfathering for pre-existing setups reduces immediate pressure.
Update of Circular CSSF 07/325 on Provisions relating to credit institutions and investment firms of EU origin established in Luxembourg by way of branches or exercising activities in Luxembourg by way of free provision of services, as amended by Circulars CSSF 21/765 and CSSF 22/827
AI Analysis
Circular CSSF 25/898 updates Luxembourg's supervisory framework for EU-origin credit institutions and investment firms operating in Luxembourg through branches or free provision of services. This amendment enhances the self-assessment questionnaire (SAQ) used by the CSSF to align supervisory oversight with current regulatory priorities, particularly adding UCI administration as a new thematic module. The update reflects the CSSF's evolving supervisory focus and requires affected institutions to demonstrate compliance with expanded assessment criteria.
Key dates
31 October 2025
- Circular CSSF 25/898 published by the CSSF
19 December 2025
- Related modernization framework (Circular CSSF 25/901) entered into force for Part II UCIs, SIFs, and SICARs
No specific implementation deadline stated Deadline
- Institutions should align their SAQ responses and compliance documentation with the updated framework immediately upon publication
Suggested considerations
*Update Self-Assessment Processes
Revise internal SAQ completion procedures to address the new UCI administration module
Ensure all thematic modules reflect current supervisory expectations
*Assess UCI Administration Compliance
If the institution provides or is involved in UCI administration services, conduct a detailed assessment of compliance with CSSF expectations
What changed
The circular introduces the following material modifications to Circular CSSF 07/325:
New Supervisory Module
UCI administration has been added as a thematic module to the self-assessment questionnaire, reflecting increased regulatory attention to fund administration practices.
Enhanced Self-Assessment...
Existing modules have been updated to better align with supervisory objectives and current regulatory priorities.
The revised SAQ now captures a broader range of supervisory points of focus relevant to branch operations and cross-border service provision.
Scope Clarification
The circular applies to credit institutions whose head office is in another EU Member State and to investment firms of EU origin established in Luxembourg by way of branches or exercising activities...
This press release from the CSSF provides an update on the global situation of undertakings for collective investment at the end of August 2025, which is relevant for investment management and wealth management firms.
This press release from the CSSF provides an update on the global situation of undertakings for collective investment at the end of July 2025, which is relevant for investment management and wealth management firms.
This press release from the CSSF appears to be related to regulatory oversight and authorization for BGL BNP Paribas, a bank operating in the banking, investment management, and wealth management sectors.
This regulatory update from the CSSF provides information on the global situation of undertakings for collective investment at the end of June 2025, which is relevant for investment management and wealth management firms.
CSSF notification regarding EMIR Article 7a(1) active account registration requirements. This is informational content about regulatory reporting and disclosure obligations for derivatives market participants.
This press release from the CSSF provides an update on the global situation of undertakings for collective investment at the end of May 2025, which is relevant for investment management and wealth management firms.
This press release from the CSSF provides an update on the global situation of undertakings for collective investment at the end of April 2025, which is relevant for investment management and wealth management firms.
This regulatory update from the CSSF in Luxembourg focuses on the use of artificial intelligence in the financial sector, which impacts banking, investment management, and wealth management firms.
This press release from the CSSF provides an update on the global situation of undertakings for collective investment at the end of February 2025, which is relevant for investment management and wealth management firms.
This regulatory update relates to the profit and loss account of credit institutions, which is relevant for banking, investment management, and wealth management firms. The topics covered include prudential requirements, reporting, and licensing, which are important for these sectors.
This regulatory update relates to the takeover of Iris Financial S.A. by Younited Financial S.A., which are firms operating in the banking, investment management, and wealth management sectors. The key topics covered include authorization and licensing, prudential/capital requirements, and consumer protection.
This regulatory update relates to the application form for third country auditors and audit entities, which is relevant for banking, investment management, and wealth management firms that may need to engage such auditors.
This is an informational announcement about a public register of the audit profession maintained by CSSF (Luxembourg financial regulator). The content primarily concerns regulatory registration and licensing matters for audit firms.