CSSF Enforcement Actions

Key dates

2024-09-18

The CSSF began the on-site inspection of the manager’s corporate governance framework.

2024-10-10

The CSSF completed the on-site inspection that identified persistent internal-governance and delegation-oversight deficiencies.

2026-07-09

The CSSF imposed the total administrative fine of EUR 71,500.

2026-10-05

The CSSF published the sanction decision anonymously.

Suggested considerations

• Compliance teams may wish to map every delegated portfolio manager to a documented, risk-based periodic due-diligence plan and verify that reviews are renewed at an appropriate frequency under the manager’s risk matrix.
• Firms should consider documenting assessments of each delegate’s legal and contractual compliance, control environment, best-execution procedures, broker-selection processes and relevant reporting capabilities.
• Firms should consider testing whether delegate oversight includes independent verification rather than relying exclusively on confirmations, questionnaires or representations from portfolio managers.
• Management companies may wish to establish measurable monitoring indicators, thresholds, exception escalation and evidence-retention arrangements for best-execution oversight, consistently with the applicable delegation procedures and CSSF Circular 18/698.
• Firms should consider reviewing delegation contracts, governance reporting and action plans to demonstrate that the supervisory framework protects the interests of the funds and investors and that monitoring of delegated activities remains with the manager.
• Compliance teams may wish to benchmark their controls against the CSSF’s broader thematic and enforcement messaging; independent commentary indicates that inadequate delegate supervision, weak quantitative monitoring and insufficient evidence of independent controls are recurring supervisory concerns.

What changed

This is an enforcement action rather than a new rule. The CSSF applied Article 110(1)(b) and (f), and Articles 148(2)(j) and 148(4)(e), of the amended Law of 17 December 2010 relating to undertakings for collective investment, together with Article 18(1)(e) and (f), and Article 51(1) and (2), of the amended Law of 12 July 2013 on alternative investment fund managers. The fine comprised EUR 47,320 under the 2010 Law and EUR 24,180 under the AIFM Law.

Key dates

2026-08-21

CSSF published the administrative sanction imposed on BigRep SE.

Suggested considerations

• Firms should confirm whether each Luxembourg-home-State issuer in scope has published its annual financial report no later than four months after the end of the financial year under Article 3 of the Transparency Law.
• Firms should verify that half-yearly financial reports are published no later than three months after the end of the first six months of the financial year under Article 4 of the Transparency Law.
• Compliance teams may wish to test evidence of effective dissemination, filing with the CSSF and storage with the Officially Appointed Mechanism for each periodic report.
• Issuer boards and senior management may wish to review escalation procedures for missed reporting deadlines and CSSF orders, including documented ownership, contingency arrangements and prompt remediation.
• Firms should consider maintaining an auditable reporting calendar that captures statutory deadlines, CSSF correspondence, publication timestamps, CSSF filings and Officially Appointed Mechanism confirmations.
• Issuers subject to a CSSF order should consider treating the order as a separately tracked remediation obligation rather than relying solely on completion of the underlying publication.

What changed

The CSSF imposed an administrative sanction on BigRep SE under the amended Luxembourg law of 11 January 2008 on transparency requirements for issuers. The decision concerns BigRep SE's failure to comply with the applicable requirement to publish periodic financial information and with related obligations concerning effective dissemination, filing with the CSSF and storage through the Officially Appointed Mechanism. The sanction is an enforcement action against a specific issuer rather than a new rule or general regulatory amendment.

Key dates

2026-08-21

CSSF publication of the administrative sanction against Corestate Capital Holding S.A.

Suggested considerations

• Compliance teams of Luxembourg-home-State issuers should obtain and review both PDFs linked to the CSSF publication to confirm the sanction amount, affected report, breached provision, reasoning and any required remediation.
• Issuers should consider testing their annual and half-yearly financial-reporting calendars against the applicable deadlines in Articles 3 and 4 of the Transparency Law, including controls for effective dissemination, filing with the CSSF and storage through the Officially Appointed Mechanism.
• Boards and senior management may wish to document ownership, escalation and evidence-retention arrangements for periodic-reporting deliverables, particularly where audits, restructuring, going-concern issues or delayed financial close could affect publication timing.
• Groups with repeated or historic reporting delays should consider a targeted review of prior CSSF correspondence, compliance with supervisory orders and the completeness of issuer disclosure controls.
• Legal and compliance teams should assess whether any appeal or procedural response is relevant after reviewing the decision; the publication page supplied does not state an appeal period.

What changed

The CSSF imposed an administrative sanction on Corestate Capital Holding S.A. The supplied publication page does not disclose the sanction amount, the precise reporting failure, the legal provision breached, or any remedial order; those details should be taken from the linked PDF decision before relying on them operationally. The publication does not itself introduce a new general obligation: the relevant existing framework is the Luxembourg Transparency Law of 11 January 2008, including its periodic-reporting, dissemination, storage and CSSF-filing requirements where applicable.

Key dates

2026-08-21

CSSF imposed and published the €10,000 administrative fine against Gaz Capital S.A. for non-compliance concerning the annual financial report for the year ended 31 December 2025.

Suggested considerations

• Compliance teams may wish to identify every security for which the firm has Luxembourg as its home Member State and confirm whether any Article 7 exemption applies.
• Issuers with a 31 December financial year-end should consider scheduling publication of the annual financial report no later than 30 April of the following year, subject to the applicable reporting-period and instrument requirements.
• Firms should consider maintaining evidence of timely publication, effective dissemination, submission to the CSSF and storage on the Officially Appointed Mechanism, including timestamps, responsible persons and vendor confirmations.
• Reporting calendars may be reviewed to ensure that audited financial statements, the management report and responsible-person statements are complete and approved sufficiently before the four-month deadline.
• Where a delay is possible, issuers may wish to escalate promptly to senior management, legal counsel and the CSSF and document the cause, remediation and communications plan; the sanction indicates that failure across multiple disclosure channels can be treated as non-compliance even where the underlying report is subsequently produced.
• The issuer may wish to assess whether to challenge the decision before the Tribunal administratif within the statutory three-month period.

What changed

No new regulatory obligation was introduced; this is an enforcement action applying existing requirements. An issuer for which Luxembourg is the home Member State must make its annual financial report public no later than four months after the end of each financial year under Article 3 of the Transparency Law, keep it publicly available for at least 10 years, effectively disseminate it, store it on the Officially Appointed Mechanism and file it with the CSSF.

Key dates

31 March 2021 Deadline

– End of the financial year referenced in the prior CSSF sanction against Transnet Soc Ltd for failure to publish its annual financial report within the required time limit

15 November 2021

– CSSF imposed an administrative fine of EUR 15,000 on Transnet Soc Ltd under Article 25(2) of the Transparency Law for late publication of the annual financial report as of 31 March 2021

21 July 2026

– CSSF publishes the administrative sanction “Administrative sanction imposed on Transnet Soc Ltd”; this enforcement notice is made public in line with the Transparency Law’s publication requirements

TBD (within 3 months of CSSF decision)

– Statutory window during which Transnet Soc Ltd (or any sanctioned issuer) may lodge a court action against the CSSF decision with the Luxembourg Administrative Court under Article 27 of the Transparency Law

Suggested considerations

• Map all Transparency Law obligations applicable to your entity, including periodic (annual and half‑yearly) reporting and ongoing disclosure of regulated information, and document them in a compliance obligations register.
• Review and, where necessary, strengthen internal processes to ensure annual and half‑yearly financial reports are prepared, approved, and published within statutory deadlines for issuers with Luxembourg as home Member State.
• Implement a formal disclosure governance framework assigning clear responsibilities to senior management and the board for oversight of regulated information, including escalation procedures where delays or issues arise.
• Establish a calendar of regulatory reporting and publication deadlines, including internal cut‑off dates and contingency plans, and ensure it is monitored by compliance and finance functions.
• Conduct a gap analysis of prior disclosures (financial reports, major holdings notifications, inside information) to confirm that all items required under the Transparency Law have been published correctly and on time; remediate any deficiencies promptly.

What changed

• As the 21 July 2026 CSSF notice is an enforcement publication (not a new rule), it does not introduce new regulatory requirements; it applies existing Transparency Law obligations.
• Issuers with Luxembourg as home Member State under the Transparency Law must publish annual financial reports within the statutory deadline, typically within four months of financial year-end, and...
• Failure to publish periodic financial information within the required time limits can result in administrative fines imposed by the CSSF under Article 25(2) of the Transparency Law.
• The CSSF will publicly disclose administrative fines imposed on issuers, including naming the issuer and the amount, in line with Article 26b of the Transparency Law.
• Issuers retain the right to challenge CSSF decisions before the Luxembourg Administrative Court within the period set by Article 27 of the Transparency Law (three months from notification), but...

Key dates

20 January 2026

– CSSF Circular 26/906 on central administration, internal governance and risk management for payment institutions, electronic money institutions and account information service providers is published

23 March 2026

– Decision date of the administrative sanction imposed on members of the board of directors of an electronic money institution

30 June 2026

– Application date of CSSF Circular 26/906, from which its governance and risk‑management requirements formally apply to payment institutions and electronic money institutions

21 July 2026

– CSSF publicly releases the notice “Administrative sanction of 23 March 2026 – Administrative sanction imposed on the members of the board of directors of an electronic money institution.”

Suggested considerations

• Review and map the institution’s current governance framework, board charter and committee mandates against the detailed requirements of CSSF Circular 26/906, including central administration, board composition, responsibilities and functioning.
• Ensure that the board of directors collectively has the required expertise, independence, diversity and time commitment, and that this is documented and periodically reassessed in line with CSSF expectations.
• Update board policies to explicitly assign responsibility for strategy, risk appetite, safeguarding of client funds, information security, outsourcing, conflicts of interest and AML/CFT, and ensure these responsibilities are effectively discharged and evidenced.
• Confirm that the institution’s central administration, decision‑making centre and administrative centre are physically located in Luxembourg and that members of the management body are sufficiently present on site, as required under the governance framework.
• Establish or reinforce the “three lines of defence” model by clearly separating business units, control functions (compliance and risk) and internal audit, and ensure reporting lines to the board are independent and robust.

What changed

• - The CSSF demonstrates that it is prepared to impose administrative sanctions directly on members of the board of directors of electronic money institutions, not just on the institution as a legal...
• Board members of Luxembourg‑authorised electronic money institutions are now clearly exposed to personal regulatory liability for governance, risk management and safeguarding failures under the CSSF...
• This enforcement confirms that CSSF Circular 26/906 on central administration, internal governance and risk management for payment institutions and electronic money institutions is not only a formal...
• The sanction underscores CSSF expectations that the supervisory body (board of directors) must ensure sound and prudent management, continuity of the institution and protection of its reputation, and...
• The case signals a stricter enforcement posture by the CSSF towards the payments and e‑money sector, aligning its expectations and enforcement intensity more closely with bank‑equivalent governance...

Key dates

20 January 2026

– CSSF publishes Circular 26/906 on central administration, internal governance and risk management for payment and e‑money institutions, raising supervisory expectations for the sector

2 March 2026

– CSSF issues the administrative sanction decision imposing an administrative fine of EUR 12,000 on PingPong Europe S.A. as an electronic money institution

30 June 2026

– Effective date of CSSF Circular 26/906, from which strengthened governance, risk management and safeguarding requirements apply to payment and e‑money institutions

8 July 2026

– CSSF publicly publishes the administrative sanction of 2 March 2026, formally informing the market and stakeholders

Suggested considerations

• Review the CSSF sanction against PingPong Europe S.A. and identify which categories of requirements (e.g. governance, safeguarding of client funds, reporting, outsourcing, internal controls) were implicated, then map these to your own control framework.
• Conduct a gap analysis against CSSF Circular 26/906, focusing on central administration, internal governance, risk management, and safeguarding of client funds for payment and e‑money institutions.
• Update policies, procedures and internal control documentation governing payment services, e‑money issuance, safeguarding (segregation, reconciliations), outsourcing and IT connectivity to ensure alignment with CSSF Circular 26/906.
• Ensure that a clearly designated member of the management body holds documented responsibility for oversight of safeguarding arrangements and compliance with CSSF requirements for payment and e‑money institutions.
• Implement or enhance daily reconciliations and robust segregation of client funds accounts, supported by periodic internal reviews and testing of safeguarding controls.

What changed

• (From the enforcement notice itself, there are no new rules; the impact is interpretative and enforcement‑related.)
• CSSF confirms that authorised electronic money institutions are subject to active supervisory and enforcement scrutiny, including public administrative sanctions for regulatory breaches.
• The sanction demonstrates that failures which may appear operational or procedural can nonetheless result in monetary fines and public naming, reinforcing the need for robust compliance frameworks in...
• The case is likely to be assessed by CSSF in light of the new governance, risk management and safeguarding expectations introduced under CSSF Circular 26/906 for payment and e‑money institutions,...
• The public nature of the sanction underscores CSSF’s use of transparency as a deterrent tool, increasing reputational risk for firms that do not comply with licensing, governance, reporting or...

Key dates

05 March 2026

- CSSF imposes the administrative sanction on Stonehage Fleming Luxembourg S.A. (date of decision)

09 June 2026

- CSSF publicly announces the administrative sanction and the existence of a PDF decision (date of publication on CSSF website)

Suggested considerations

• Monitor the CSSF website for publication of the detailed PDF decision relating to the administrative sanction of 5 March 2026 against Stonehage Fleming Luxembourg S.A.
• Once available, review the full decision to identify the specific legal bases (e.g. LFS, Law of 2010, Law of 2013, AML/CFT Law) and control failures cited by the CSSF.
• Map the identified weaknesses from the decision against your firm’s governance, internal control, delegate oversight and AML/CFT frameworks to identify any similar risk areas.
• Update internal compliance risk assessments to reflect the enforcement themes highlighted in this and recent CSSF sanctions, including the weighting of enforcement risk for organisational and AML/CFT deficiencies.
• Review and, where necessary, strengthen board and senior management oversight arrangements, including the documentation of decisions, challenge and escalation processes, in anticipation of CSSF expectations evidenced in the forthcoming decision.

What changed

• At this stage, based on the CSSF notice alone, no new legal or regulatory requirements are introduced; the publication is a transparency notice that a sanction decision exists.
• the Law of 5 April 1993 on the financial sector (LFS), the Law of 17 December 2010 on undertakings for collective investment, the Law of 12 July 2013 on AIFMs, and the Law of 12 November 2004 on the...
• the CSSF’s established practice of publishing individual sanction decisions, which typically detail shortcomings in organisational requirements, internal controls, oversight of delegates, conduct of...
• the legal provisions breached (for example, Articles 109–111 and 148 of the Law of 2010 or Articles 2-2, 3 and 8-4 of the AML/CFT Law, by analogy with other CSSF sanctions),
• the factual deficiencies identified (e.g., weaknesses in governance, delegate oversight, AML risk assessment, customer due diligence), and

Key dates

17 April 2026

- CSSF adopts an administrative sanction decision against a registered alternative investment fund manager

05 June 2026

- CSSF publishes the administrative sanction notice on its website, including links to the detailed sanction decision in PDF form

Suggested considerations

• Obtain and review the full CSSF sanction decision PDFs published with the 17 April 2026 administrative sanction to identify the specific legal provisions, facts and control failures cited.
• Map the identified breaches (e.g. governance, risk management, reporting, valuation, delegation, marketing, or conduct of business) against your firm’s current policies and procedures under the Law of 12 July 2013 on AIFMs and the AIFMD framework.
• Perform a targeted gap analysis for registered AIFMs, focusing on whether “light” registration has led to under‑resourced compliance, risk, valuation, or reporting functions that could attract similar enforcement.
• Review and, where necessary, update internal governance arrangements, including board oversight, documented decision‑making, and escalation processes for regulatory issues, to align with CSSF expectations evidenced in recent sanctions against AIFMs and management companies.
• Test the effectiveness of regulatory reporting and disclosure processes (including Annex IV reporting, investor disclosures, periodic reporting, and prospectus/issuing document accuracy) to ensure they are complete, timely and consistent with CSSF rules.

What changed

• There are no formal rule changes announced in the short notice itself; however, the enforcement action reinforces several practical expectations that compliance teams should treat as de‑facto...
• CSSF confirms that registered alternative investment fund managers are fully subject to Luxembourg’s AIFM framework, including the Law of 12 July 2013 on alternative investment fund managers and the...
• CSSF reiterates, through enforcement practice, that registration status (sub‑threshold AIFM) does not shield managers from administrative sanctions where organisational, conduct, reporting, or...
• CSSF continues its policy of public naming and shaming through publication of administrative sanctions, signalling that reputational impact is a key component of its deterrence strategy.
• The sanction underscores the CSSF’s readiness to use its full sanctioning toolkit under the AIFM Law, which can include monetary fines, public statements, and prohibitions or restrictions on...

Key dates

30 June 2025

- Reference date for BigRep SE's half-yearly financial report that was not published

12 January 2026

- Date of initial €10,000 fine for failure to publish the report

1 April 2026 Deadline

- Date of €20,000 fine for non-compliance with CSSF order on report dissemination, OAM storage, and CSSF filing

1 July 2026 Deadline

- Deadline to lodge appeal with the Tribunal administratif (three months from 1 April 2026 sanction, per Article 27)

Suggested considerations

• Issuers must ensure timely publication of periodic financial reports (half-yearly per Article 4, annual per Article 3) via effective dissemination, OAM storage (e.g., Luxembourg Stock Exchange systems), and CSSF filing.
• Respond promptly to any CSSF orders or injunctions to avoid escalated fines.
• Implement robust internal controls for reporting calendars, including automated reminders and pre-verification processes.
• Review and file any overdue reports immediately upon CSSF notification.

What changed

This is not a regulatory change but an enforcement action under the existing amended Law of 11 January 2008 on transparency requirements for issuers (Transparency Law). Key requirements reiterated include Article 4 (obligation to publish half-yearly financial reports), effective dissemination, storage on the OAM, and filing with CSSF, with CSSF empowered under Article 25(1) to impose fines for non-compliance, considering circumstances per Article 26a. This follows a prior €10,000 fine on the same issuer on 12 January 2026 for initial failure to publish the same report.

Key dates

31 December 2024 Deadline

- Likely reference period end for continuing education non-compliance (inferred from identical prior case)

2 December 2025

- Date of administrative sanction imposition by CSSF

6 March 2026

- Publication date of the sanction notice (today's date, aligning with CSSF practice for transparency under Article 48(2) of the Audit Law)

Suggested considerations

• Immediate self-audit: Statutory auditors must verify personal compliance with continuing education hours under CSSF Regulation N°16-10, documenting hours against Article 3(1) requirements and submitting evidence if requested.
• Remediation plan: If shortfalls identified, complete deficit training promptly and notify CSSF of corrective measures, as seen in related governance cases where entities implemented remediation.
• Internal training programs: Audit firms should enhance monitoring of auditor CPE (continuing professional education) logs, integrating CSSF controls akin to Article 10 of the Audit Law.
• Fit-and-proper reviews: Boards and compliance officers assess auditor qualifications, escalating any gaps to CSSF per professional obligations.
• Record retention: Maintain verifiable CPE records for at least the reference period plus CSSF inspection windows (typically 3-5 years).

What changed

This is not a regulatory change or new requirement but an enforcement action applying existing rules under point f) of Article 43(1) read with point a) of Article 43(2) and Article 44 of the Law of 23 July 2016 on the audit profession (Audit Law), alongside CSSF Regulation N°16-10 on continuing education.

Key dates

31 December 2024 Deadline

- Reference period end for continuing education compliance (inferred from similar case)

2 December 2025

- Date of administrative sanction imposition by CSSF

6 March 2026

- Publication date of the sanction notice

Suggested considerations

• Statutory auditors must immediately verify compliance with Article 3(1) of CSSF Regulation N°16-10, ensuring minimum continuing education hours are met for relevant periods.
• Audit firms should conduct internal audits of training logs and implement remediation plans, including supplementary training if deficits exist.
• All affected parties must report any identified breaches to CSSF proactively and retain evidence of corrective actions, as CSSF controls under Article 10 of the Audit Law can trigger fines.

What changed

No new regulatory changes are introduced; this is an enforcement action applying existing rules under point f) of Article 43(1) read with point a) of Article 43(2) and Article 44 of the Law of 23 July 2016 concerning the audit profession (Audit Law), alongside CSSF Regulation N°16-10 on continuing education for statutory auditors. Breaches typically involve failing to meet the minimum total hours of continuing education by the reference period end (e.g., December 31, 2024, as in a comparable August 2025 case).

Key dates

10 January 2025

- Date of prior depositary oversight fine

4 April 2025 Deadline

- Deadline for submitting CSSF AML/CFT Questionnaire (breach example from similar case)

16 July 2025

- Date of fine imposition for UCITS investment policy breaches

11 September 2025

- Date of fine imposition in comparable AIFM non-cooperation case

8 October 2025

- Date of the sanction in question

Suggested considerations

• Enhance cooperation protocols: Implement automated tracking for CSSF requests (e.g., questionnaires) with escalations for reminders; document all responses.
• Review investment compliance: Audit broker exposures, valuation processes, and subscription/redemption controls against UCI Law Articles 41-43, 109; suspend dealings if uncertainties arise.
• Strengthen governance: Conduct gap analyses on internal controls, risk assessments, and reporting for depositary/oversight functions per AIFM Law Article 19(9) and CDR 231/2013.
• Training and monitoring: Roll out firm-wide training on AML/CFT obligations (Article 5(1)) and perform reconciliations of assets/records; prepare for on-site/off-site CSSF inspections.
• Self-reporting: Proactively disclose prior breaches to mitigate fine severity.

What changed

• No new regulatory changes or requirements are introduced; this is an enforcement action applying existing rules.
• Failure to cooperate with CSSF requests, e.g., not submitting required AML/CFT questionnaires by deadlines, violating Article 5(1) of the amended Law of 12 November 2004 on AML/CFT.
• Non-compliance with investment policies, organizational requirements, or conduct rules under the UCI Law (e.g., Articles 41, 43, 109), including improper broker exposures or valuation failures.
• These reflect ongoing enforcement of established frameworks like the AIFM Law, UCI Law, and AML/CFT Law, with fines calibrated by factors like breach duration, firm size, cooperation level, and prior...

Key dates

20 June 2025 Deadline

- Prior administrative sanction imposed on Corestate Capital Holding S.A., indicating ongoing non-compliance issues

6 February 2026

- Publication date of the current administrative sanction on Corestate Capital Holding S.A., effective immediately as a public enforcement notice

Suggested considerations

• Conduct immediate gap analysis: Review safekeeping processes for ownership verification (Article 19(8)(b) AIFM Law), ensuring transaction documentation, segregated account proofs, and full holding chain records are available at transaction points.
• Enhance oversight duties: Implement risk assessments per Article 92(1) CDR 231/2013, valuation compliance checks (Article 94), and cash remittance monitoring (Article 96); appoint delegates with due diligence.
• Strengthen governance: Update internal controls, procedures, and conflict-of-interest policies (e.g., director overlaps); ensure key documentation availability and evidence of controls.
• Firm-wide audit: For repeat offenders like Corestate, perform root-cause analysis on prior sanctions and submit remediation plans to CSSF if inspected.
• Training and reporting: Train staff on CSSF expectations; improve cooperation mechanisms to avoid AML/CFT fines for non-submission of requests.

What changed

No new regulatory changes or requirements are introduced; this is an enforcement action enforcing existing obligations under laws like the AIFM Law of 12 July 2013 (e.g., Articles 19(8), 19(9), 19(11) on safekeeping and oversight duties), the Law of 5 April 1993 on the financial sector, and Commission Delegated Regulation (EU) No 231/2013 (CDR 231/2013, e.g., Articles 92, 94, 96 on risk assessment, valuation verification, and cash flow monitoring).

Key dates

20 June 2025

- Prior administrative sanction imposed on Corestate Capital Holding S.A

6 February 2026

- Publication date of the current administrative sanction on Corestate Capital Holding S.A

Suggested considerations

• Conduct immediate gap analysis on depositary functions: Verify ownership chains, transaction documentation, segregated account reconciliations, and custodian delegations per AIFM Law Articles 19(8) and 19(11).
• Enhance oversight processes: Implement risk assessments for AIF strategies, valuation policy checks, and cashflow monitoring per CDR 231/2013 Articles 92, 94, and 96.
• Strengthen governance: Review internal controls, procedures, and conflicts (e.g., director overlaps with affiliates); ensure availability of control evidence.
• For issuers like Corestate: Confirm compliance with half-yearly financial reporting and dissemination under Transparency Law Article 4.
• Firm-wide: Perform mock CSSF on-site inspections focusing on 2022-2025 periods, given inspection timelines in recent cases.

What changed

No new regulatory changes or requirements are introduced; this is an enforcement action highlighting non-compliance with existing obligations under Luxembourg's AIFM Law (notably Articles 19(8), 19(9), 19(11), and 51) and related delegated regulations like CDR 231/2013. Key breaches from analogous recent CSSF sanctions include inadequate safekeeping of assets (e.g., missing ownership verification and records), failure to oversee AIFM valuation policies and cash remittance timelines, improper delegation to custodians without due diligence, and weak internal governance such as conflicts of...

Key dates

23 July 2025

- Date of administrative sanction imposition on Genève Invest (Europe) S.A

4 February 2026

- Publication date of the sanction document by CSSF

Suggested considerations

• Immediate review of counterparty due diligence: Verify licenses and financial stability of brokers/prime brokers; cease deposits with unauthorized or suspended entities per UCI Law Article 41.
• Enhance valuation and accounting controls: Ensure assets (e.g., cash deposits) are valued at probable realization value per Article 28(4) UCI Law and prospectus terms; implement automated monitoring for ongoing compliance.
• Conduct internal audits: Assess organizational requirements, investment policies, and conduct rules (CSSF Regulation 10-04); remediate gaps proactively, as seen in mitigated sanctions for cooperative firms.
• Update governance and reporting: Document risk assessments and report prior breaches to CSSF to demonstrate cooperation, potentially reducing fine severity.

What changed

This is not a regulatory change or new requirement but an enforcement action highlighting existing obligations under Luxembourg law. Key breaches likely mirror patterns in recent CSSF sanctions, such as non-compliance with UCI Law provisions on investment policies (e.g., Articles 41, 43), sound accounting procedures (Article 109), and rules of conduct (Articles 111, CSSF Regulation 10-04), including improper cash deposits with unauthorized brokers and inaccurate asset valuation.

Key dates

4 April 2025 Deadline

- Deadline for submission of the annual financial crime questionnaire covering the year ending 31 December 2024

11 September 2025

- Date CSSF imposed the EUR 10,000 administrative fine on the AIFM for non-submission

9 January 2026

- Publication date of the sanction decision

30 January 2026

- Publication of the queried sanction notice (noting minor title discrepancy possibly referencing a separate but analogous case).[user provided]

Suggested considerations

• Immediate verification: Confirm timely submission of 2025 financial crime questionnaire (likely due April 2026 for 2025 data); review internal processes for CSSF reminders and automate alerts.
• Procedural enhancements: Implement robust tracking systems for supervisory questionnaires, designate a responsible senior manager for AML cooperation, and document all responses or justifications for delays.
• Training and testing: Conduct firm-wide training on AML/CFT Law Article 5(1) obligations; perform mock audits of reporting workflows, especially for registered AIFMs managing non-CSSF authorized funds.
• Engagement protocol: Respond promptly to CSSF reminders; request in-person meetings if needed before fines escalate; review cooperation history to mitigate fine severity.
• Policy updates: Align with CSSF Circular 25/894 for expanded AIFM reporting on unauthorized funds (notification within 10 working days for registered AIFMs).

What changed

• This is not a regulatory change or new requirement but an enforcement precedent highlighting existing obligations under the AML/CFT Law:
• Mandatory annual submission of the CSSF financial crime questionnaire by supervised entities, including registered AIFMs, as part of the cooperation duty in Article 5(1).
• Fines determined per Article 8-4(1), (2)(f), and (3)(a), considering circumstances under Article 8-5(1), with publication assessed for proportionality under Article 8-6(1). No new rules introduced;...

Key dates

30 June 2025 Deadline

- Period-end date for the required half-yearly financial report that BigRep SE failed to publish

12 January 2026

- Date of administrative sanction imposition by CSSF and publication of the decision

Within 3 months of 12 January 2026 Deadline

(i.e., by 12 April 2026) - Deadline for BigRep SE to lodge a court action with the Tribunal administratif against the sanction, per Article 27 of the Transparency Law

Suggested considerations

• Issuers: Immediately review internal processes for half-yearly financial reporting to ensure compliance with Article 4, including timely publication, OAM storage, and CSSF filing; conduct gap analyses against Transparency Law deadlines.
• All affected parties: Implement or enhance monitoring calendars for periodic disclosures, with automated alerts for period-ends like 30 June; perform mock filings to test dissemination and storage mechanisms.
• BigRep SE specifically: Consider appeal to Tribunal administratif within 3 months if contesting the fine; remediate the specific non-compliance by publishing the overdue report if not already done.
• wide actions are mandated beyond general adherence, but proactive audits are advisable given CSSF's supervisory focus.

What changed

This is not a regulatory change or new requirement but an enforcement of existing obligations under the Transparency Law of 11 January 2008 (as amended), specifically Article 4, which mandates issuers to publish half-yearly financial reports, including effective dissemination, storage on the Officially Appointed Mechanism (OAM), and filing with the CSSF. No new rules are introduced; the sanction reinforces the unchanged deadlines and processes for periodic information publication, with the CSSF acting under Article 25(2) as the competent authority.

Key dates

31 December 2024

- Reference year-end for the financial crime Questionnaire

4 April 2025 Deadline

- Statutory deadline for Questionnaire submission to CSSF

11 September 2025

- Date CSSF imposed the €10,000 administrative fine after non-submission despite reminders

9 January 2026

- Publication date of the sanction decision

Suggested considerations

• Immediately review internal processes for annual Questionnaire submission, ensuring calendar invites and automated reminders for the 4 April deadline (covering prior year-end data).
• Conduct a gap analysis on AML/CFT cooperation obligations under Article 5(1), including response protocols to CSSF reminders or queries.
• Update compliance calendars and train staff on escalation procedures; document all submissions with proof (e.g., timestamps, acknowledgments).
• For AIFMs: Verify CSSF registration status under Article 3(2) of the 12 July 2013 AIFM Law and align with broader AML duties.
• If late, proactively submit overdue items and request meetings if needed, as non-response forfeits mitigation opportunities.

What changed

This is not a regulatory change but an enforcement precedent under existing rules: non-compliance with Article 5(1) of the AML/CFT Law, which mandates annual submission of a financial crime questionnaire ("Questionnaire") to the CSSF. The fine was calculated per Articles 8-4(1), 8-4(2)(f), and 8-4(3)(a), considering circumstances under Article 8-5(1). Publication followed Article 8-6(1) after a proportionality assessment, confirming no market stability risks.

Key dates

April 4, 2025 Deadline

– Annual financial crime questionnaire submission deadline (for year ending December 31, 2024)

Before September 11, 2025

– Two reminder notices issued by CSSF to Sunbricks GP

September 11, 2025

– Administrative fine decision date; questionnaire still not submitted

January 9, 2026

– Publication date of enforcement decision

Suggested considerations

• regulated entities must:
• *Establish Calendar Controls: Implement internal compliance calendars flagging the April 4 annual questionnaire submission deadline with sufficient lead time (minimum 4-6 weeks before deadline)
• *Designate Responsible Parties: Assign clear ownership for questionnaire completion and submission, with backup contacts
• *Prepare Documentation: Maintain contemporaneous records of financial crime controls, suspicious activity reporting, and compliance activities throughout the year to support accurate questionnaire responses
• *Monitor Communications: Ensure all CSSF correspondence is tracked and escalated immediately; do not ignore reminder notices

What changed

• This is not a regulatory change but rather an enforcement action clarifying existing obligations:
• Mandatory Annual Questionnaire Requirement: All professionals supervised, authorized, or registered by the CSSF must submit an annual questionnaire on financial crime by April 4 each year, covering...
• Cooperation Obligation: Article 5(1) of the amended Law of 12 November 2004 on AML/CFT establishes a non-negotiable duty to cooperate with the CSSF, which includes timely submission of requested...
• Administrative Fine Framework: The CSSF applies Article 8-4 of the AML/CFT Law to impose fines for non-compliance, with amounts determined under Article 8-5 based on all relevant circumstances.

Key dates

4 April 2025 Deadline

- Deadline for submitting the annual financial crime questionnaire covering the year ending 31 December 2024

11 September 2025

- Date CSSF imposed the €10,000 administrative fine on Capitalis Premiere Group for non-submission

9 January 2026

- Date of CSSF publication of the sanction decision

Suggested considerations

• Ensure timely submission of annual financial crime questionnaires by 4 April each year (for prior calendar year data); implement calendar reminders and escalation processes for CSSF requests.
• Respond promptly to CSSF reminders or queries on AML/CFT compliance to avoid escalation to fines; document any delays with justification evidence.
• Review internal AML cooperation protocols, including governance for questionnaire completion, and train staff on Article 5(1) obligations; consider requesting in-person meetings if disputing CSSF demands.
• No retroactive actions needed for this case, but conduct gap analysis on reporting workflows to prevent similar breaches.

What changed

This is not a regulatory change or new requirement but an enforcement precedent under existing rules: non-compliance with the annual financial crime questionnaire submission, mandated by Article 5(1) of the AML/CFT Law, triggers fines per Articles 8-4(1), 8-4(2)(f), and 8-4(3)(a). The CSSF considered all relevant circumstances under Article 8-5(1) to set the €10,000 fine amount and published the sanction nominatively after proportionality assessment per Article 8-6(1), confirming no market stability risks.

Key dates

4 April 2025 Deadline

- Deadline for submission of annual financial crime questionnaire for year ending 31 December 2024

11 September 2025

- Date CSSF imposed administrative fine after two reminders went unheeded

9 January 2026

- Publication date of the administrative sanction decision

Suggested considerations

• *Establish Calendar Controls: Implement firm-wide systems to track the annual financial crime questionnaire deadline (typically 4 April for the prior calendar year)
• *Designate Responsible Parties: Assign clear ownership for questionnaire completion and submission to the CSSF, with escalation procedures
• *Monitor CSSF Communications: Establish protocols to immediately flag and respond to any CSSF correspondence, including reminders or requests for information
• *Document Submission: Maintain evidence of timely submission (timestamps, confirmation receipts) to demonstrate compliance
• *Escalate Non-Compliance Immediately: If submission cannot be met by deadline, proactively contact the CSSF to explain delays and request extensions rather than ignoring reminders

What changed

• This is not a regulatory change but rather an enforcement action clarifying existing obligations. However, it reinforces critical compliance requirements:
• Mandatory Annual Questionnaire Submission: All CSSF-supervised professionals, including AIFMs, must submit an annual questionnaire on financial crime by the specified deadline (in this case, 4 April...
• Cooperation Obligation: Article 5(1) of the amended Law of 12 November 2004 on the fight against money laundering and terrorist financing establishes a non-negotiable obligation to cooperate with the...
• Enforcement Escalation: The CSSF will issue reminders before imposing sanctions, but failure to respond to reminders results in administrative fines determined under Article 8-4 of the AML/CFT Law.

Key dates

4 April 2025 Deadline

- Deadline for submission of financial crime questionnaire for the year ending 31 December 2024

Before 11 September 2025 Deadline

- CSSF issued two reminders to Max Gain Capital after the missed deadline

11 September 2025

- CSSF imposed the €10,000 administrative fine

9 January 2026

- CSSF published the administrative sanction decision

Suggested considerations

• regulated entities must:
• *Identify Reporting Obligations: Confirm whether your firm is subject to the annual financial crime questionnaire requirement under Article 5(1) of the AML/CFT Law
• *Calendar Management: Establish internal processes to ensure questionnaires are submitted by 4 April each year for the preceding calendar year
• *Documentation: Maintain records demonstrating timely submission and preserve evidence of compliance
• *Escalation Protocol: If unable to meet deadlines, proactively contact the CSSF to request extensions or clarification rather than ignoring reminders

What changed

• This is not a regulatory change but rather an enforcement action clarifying existing obligations:
• Mandatory Annual Questionnaire Requirement: All CSSF-supervised professionals must submit an annual questionnaire on financial crime covering the preceding calendar year.
• Cooperation Obligation: Article 5(1) of the amended Law of 12 November 2004 on AML/CFT imposes a non-negotiable duty to cooperate with CSSF supervisory requests.
• Enforcement Escalation: The CSSF will issue reminders before imposing sanctions, but continued non-compliance triggers administrative fines under Article 8-4 of the AML/CFT Law.

Key dates

4 April 2025 Deadline

– Deadline for submission of financial crime questionnaire for year ending 31 December 2024

Before 11 September 2025

– Two reminder notices issued by CSSF to Agriland Management S.A

11 September 2025

– Administrative fine imposed

9 January 2026

– Sanction published by CSSF

Suggested considerations

• *Establish Reporting Calendars: Implement systems to track the 4 April annual deadline for financial crime questionnaire submissions
• *Designate Responsible Personnel: Assign clear accountability for completing and submitting the questionnaire to the CSSF
• *Respond to Regulatory Requests: Do not ignore CSSF reminders; engage proactively, including requesting in-person meetings if clarification is needed
• *Document Justifications: If unable to meet deadlines, provide written evidence explaining the delay and proposed remediation timeline
• *Monitor Supervisory Communications: Establish procedures to ensure regulatory correspondence is tracked and escalated appropriately

What changed

• This is not a regulatory change but rather an enforcement action that clarifies existing obligations:
• Mandatory Annual Reporting: All CSSF-supervised professionals must submit an annual questionnaire on financial crime by 4 April each year, covering the preceding calendar year.
• Cooperation Obligation: Article 5(1) of the amended Law of 12 November 2004 on AML/CFT establishes a non-negotiable duty to cooperate with the CSSF, including timely submission of requested...
• Enforcement Escalation: The CSSF will issue reminders for non-compliance, but continued failure to respond triggers administrative sanctions without requiring evidence of intentional misconduct.

Key dates

31 December 2024 Deadline

- Reference period end for the Questionnaire covering financial crime compliance

4 April 2025 Deadline

- Statutory deadline for Questionnaire submission to CSSF

11 September 2025

- Date of administrative fine imposition (€10,000) after non-submission despite reminders

9 January 2026

- Publication date of the sanction decision by CSSF

Suggested considerations

• Immediately verify submission status of the 2024 Questionnaire (or any outstanding); if overdue, submit promptly with justification to mitigate further escalation.
• Implement automated calendar alerts and internal workflows for all CSSF reporting deadlines, including annual AML/CFT Questionnaire.
• Conduct a compliance gap analysis on cooperation obligations under Article 5(1) AML/CFT Law, documenting reminder responses and evidence retention.
• Train senior managers and compliance teams on supervisory interactions, including rights to request in-person meetings before fines.
• Review governance for timely escalation of CSSF reminders to decision-makers.

What changed

This is not a regulatory change or new requirement but an enforcement of existing obligations under the amended Law of 12 November 2004 on the fight against money laundering and terrorist financing (AML/CFT Law). Specifically, it reaffirms the mandatory annual submission of the CSSF's financial crime questionnaire ("Questionnaire") by supervised professionals, including AIFMs under Article 3(2) of the Law of 12 July 2013 on AIFMs, as part of the cooperation duty in Article 5(1).

Key dates

31 December 2024

- Reference year-end for the financial crime Questionnaire

4 April 2025 Deadline

- Statutory deadline for submitting the Questionnaire for the year ending 31 December 2024

11 September 2025

- Date CSSF imposed the €10,000 administrative fine after noting non-submission despite reminders

9 January 2026

- Date of CSSF publication of the sanction decision

Suggested considerations

• Immediate Review: AIFMs and similar entities must verify their internal processes for annual Questionnaire submission, ensuring calendar reminders and automated tracking for 4 April deadlines.
• Remediation if Late: Submit overdue Questionnaires promptly with explanations; request in-person meetings if needed, as the sanctioned AIFM failed to do so.
• Process Enhancements: Implement escalation protocols for CSSF reminders, designate a senior compliance officer for oversight, and document all submissions/acknowledgments to demonstrate cooperation under Article 5(1).
• Training: Conduct firm-wide training on AML/CFT cooperation duties, emphasizing that non-response leads to fines without need for justification.

What changed

• This is not a regulatory change or new requirement but an enforcement of existing obligations under the amended AML/CFT Law:
• Annual Questionnaire Submission: Supervised professionals, including AIFMs under Article 3(2) of the Law of 12 July 2013 on AIFMs, must submit an annual financial crime questionnaire...
• Fine Provisions: Fines are imposed per Articles 8-4(1), 8-4(2)(f), and 8-4(3)(a), with amounts determined by relevant circumstances under Article 8-5(1); publication follows Article 8-6(1) after...

Key dates

4 April 2025 Deadline

- Deadline for submission of financial crime Questionnaire covering year ending 31 December 2024

11 September 2025

- Date CSSF imposed €10,000 administrative fine on C5 Haven Cyber GP S.à r.l. for non-submission despite reminders

9 January 2026

- Date of CSSF publication announcing the sanction

Suggested considerations

• Review and confirm timely submission of all pending or future CSSF financial crime questionnaires; establish automated calendar reminders for annual deadlines (e.g., 4 April for prior year-end data).
• Implement escalation protocols for CSSF reminders, ensuring immediate response and submission within days, not weeks.
• Conduct internal audit of AML/CFT cooperation obligations, documenting justifications for any delays and preparing evidence for potential CSSF hearings or meetings.
• Update compliance policies to prioritize Article 5(1) duties, including training for responsible persons on fine risks under Article 8-4.
• For AIFMs: Verify alignment with Article 3(2) of AIFM Law and integrate questionnaire processes into governance frameworks.

What changed

• This is not a regulatory change or new requirement but an enforcement of existing obligations under the amended AML/CFT Law:
• Article 5(1) mandates supervised professionals, including AIFMs under Article 3(2) of the Law of 12 July 2013 on AIFMs, to cooperate fully with CSSF, including submitting the annual financial crime...
• Breach occurred due to non-submission of the 2024 year-end Questionnaire, with fine determined per Articles 8-4(1), 8-4(2)(f), 8-4(3)(a), and 8-5(1).
• Publication of the sanction follows Article 8-6(1), after proportionality assessment to avoid market stability risks. No new rules introduced; reinforces ongoing duty to meet CSSF reporting timelines...

Key dates

February 2023

January 2024; Period of CSSF on-site inspection on depositary obligations, covering activities up to December 2022

23 July 2025

Date CSSF imposed the €102,000 administrative fine on JTC (Luxembourg) S.A

9 January 2026

Date of official CSSF publication announcing the sanction

Suggested considerations

• related entities) must:
• Conduct immediate gap analyses on risk assessment processes for AIF strategies and AIFM organization per Article 92(1) CDR 231/2013.
• Implement robust verification processes for AIFM compliance with asset delegation rules.
• Ensure availability of key documentation and evidence of controls for the depositary function, addressing pre-2022 gaps if applicable.
• Develop and test oversight processes, leveraging self-identified improvements and action plans as mitigating factors, as JTC did prior to inspection.

What changed

This is an enforcement action, not a regulatory change; it enforces existing requirements under Article 51(1) (1st and 7th indents) and Article 51(2) (1st sub-paragraph, 3rd indent) of the amended Law of 12 July 2013 on AIFMs (AIFM Law), and related provisions like Article 92(1) of Commission Delegated Regulation (EU) No 231/2013 (CDR 231/2013).