FATCA Reporting in Luxembourg – Practical Guide for Financial Institutions

ByOfficer

Last updated: April 2026

A Luxembourg fund administrator or private bank that gets FATCA reporting wrong does not hear about it from the Administration des contributions directes (ACD) first. The notification comes from the IRS, months after filing, flagging missing or invalid US TINs across dozens or hundreds of accounts. By that point, the 120-day remediation clock is already running. If TINs are not delivered in time, the institution faces an IRS significant-non-compliance evaluation, followed by an 18-month correction window before potential NPFFI designation with GIIN cancellation and 30% withholding on US-source income. The cascade is longer than the 120-day clock alone, but it starts moving without the institution having time to choose when.

FATCA reporting in Luxembourg is mechanically straightforward once the moving parts are mapped. The problem is that the moving parts sit across US law, a bilateral intergovernmental agreement, Luxembourg domestic law, ACD circulars, IRS guidance, and the operational layer of approved transmitters and XML schemas. This guide walks through each layer as a practitioner would encounter it.

Related reading: DAC6 Mandatory Disclosure Rules

What FATCA Is and How Luxembourg Fits

The Foreign Account Tax Compliance Act was enacted by the United States Congress in 2010 as part of the HIRE Act. Its purpose is narrow: force foreign financial institutions worldwide to identify and report financial accounts held by US persons, or face a 30% withholding tax on US-source payments. The IRS describes it as targeting “non-compliance by U.S. taxpayers using foreign accounts.”

Luxembourg, like most major financial centres, chose not to force its institutions into direct agreements with the IRS. Instead, Luxembourg and the United States signed a Model 1 Intergovernmental Agreement (IGA) on 28 March 2014. Under Model 1, Luxembourg financial institutions do not report directly to the IRS. They report to the ACD, and the ACD exchanges that information with the IRS on a government-to-government basis.

This distinction matters operationally. Under a Model 2 IGA (used by jurisdictions like Switzerland, Austria, and Hong Kong), financial institutions report directly to the IRS and simultaneously notify their local tax authority. Under Luxembourg’s Model 1 arrangement, the ACD is the single point of contact. The institution’s filing obligation runs to the ACD, not to the IRS. But the IRS retains the power to evaluate compliance, and non-conformity findings flow back through the ACD.

The Luxembourg Legal Framework

The IGA was ratified and implemented by the loi du 24 juillet 2015 relative à FATCA, commonly called the Luxembourg FATCA law. This law transposes the IGA obligations into domestic law and establishes the ACD as the competent authority for receiving FATCA declarations.

Two additional instruments complement the IGA: a Memorandum of Understanding and a Competent Authority Arrangement, both signed on 28 March 2014. These documents define the operational procedures for information exchange between the ACD and the IRS, including data protection safeguards and confidentiality standards. The US Treasury lists Luxembourg’s IGA status as “In Force” with an effective date of 29 July 2015.

The ACD has issued operational guidance through its circulars. The current applicable circular is ECHA n° 3 du 10 août 2020, which defines the XML exchange format and has been in force since 6 January 2021. An earlier circular, ECHA n° 2 du 31 juillet 2015, addressed the initial due diligence obligations imposed on Luxembourg financial institutions.

Who Reports Under FATCA in Luxembourg

The FATCA law requires every Luxembourg Reporting Financial Institution to file an annual FATCA declaration with the ACD. The IGA defines which entities qualify as Financial Institutions by reference to four categories: Custodial Institutions, Depository Institutions, Investment Entities, and Specified Insurance Companies.

In Luxembourg’s financial landscape, this captures banks, private banks, investment fund managers, fund administrators acting as investment entities, custodian banks, and insurance companies issuing cash-value products. The classification that causes the most operational difficulty is the Investment Entity category, because it extends to entities that are “managed by” another Financial Institution and whose gross income is primarily attributable to investing, reinvesting, or trading in financial assets. This pulls in many Luxembourg fund vehicles, special purpose vehicles, and holding structures.

The FATCA Status Decision

Every Luxembourg legal person or legal arrangement must determine its FATCA status. The ACD’s guidance states this explicitly: each entity that is resident in Luxembourg must identify its FATCA status and be able to provide it to the ACD on request. The chosen FATCA status determines the due diligence and reporting obligations that apply.

The common mistake here is treating the FATCA status as a one-time classification exercise. In practice, an entity’s status can change when its activities change, when its management structure changes, or when an exemption it relied on no longer applies. A Luxembourg SOPARFI that was a passive Non-Financial Foreign Entity (NFFE) might become an Investment Entity if a management company takes over its investment decisions. That reclassification triggers new registration and reporting obligations that the entity’s compliance function may not be monitoring for.

Non-Reporting Financial Institutions and Exempt Statuses

Annex II of the Luxembourg-US IGA lists categories of Non-Reporting Luxembourg Financial Institutions. These include certain governmental entities, international organizations, central banks (including the Banque centrale du Luxembourg), certain retirement funds, and entities with low-value accounts. The IGA also defines categories of exempt beneficial owners and deemed-compliant financial institutions.

The operational trap: many institutions assume “deemed-compliant” means “no obligations.” It does not. Some deemed-compliant categories still require registration with the IRS. Others impose conditions that must be continuously met. If the conditions stop being met and the institution has not been monitoring them, it may have been filing incorrectly or not filing at all. Reporting teams should verify the specific conditions for their entity’s deemed-compliant category against Annex II of the IGA, not against summaries or third-party guides.

GIIN Registration and Maintenance

To file FATCA declarations with the ACD, every Luxembourg Reporting Financial Institution must register with the IRS through its online FATCA registration portal and obtain a Global Intermediary Identification Number (GIIN). The GIIN is the institution’s unique identifier in the FATCA ecosystem. Without a valid GIIN, the ACD cannot process a FATCA filing.

Registration is done through the IRS FATCA registration system at irs.gov. The process requires designating a Responsible Officer who certifies the institution’s compliance. This is not a passive role. The IRS expects the Responsible Officer to maintain the institution’s registration data, including contact information, and to deregister the GIIN promptly if the entity’s status changes or the entity is wound down.

The real problem starts when Luxembourg groups have multiple entities. Each separately registered Financial Institution needs its own GIIN. Sponsored entities, where a Sponsoring Entity agrees to perform FATCA obligations on behalf of a sponsored fund or vehicle, share registration mechanics but still need individual identification. When groups restructure, merge funds, or liquidate vehicles, the GIIN registry often lags behind the corporate reality. Stale GIINs for dissolved entities, or active entities operating without a valid GIIN because the registration was never completed after a restructuring, are among the most common findings in FATCA compliance reviews.

FATCA Reporting in Luxembourg: What Gets Filed

The FATCA declaration is an annual filing submitted to the ACD. It covers all US Reportable Accounts held at the institution during the calendar year.

What Gets Reported

For each US Reportable Account, the institution must report:

  • The identity of the account holder (name, address, US TIN)
  • The account number
  • The account balance or value at year-end (or at closure, if closed during the year)
  • For custodial accounts: gross dividends, gross interest, other income, and gross proceeds from sales or redemptions
  • For depository accounts: gross interest
  • For other accounts: the total gross amount paid or credited during the year

For accounts held by Passive NFFEs with US Controlling Persons, the same identity information is required for each Controlling Person who is a US person, plus the entity account holder information.

The US TIN Problem

US TINs are the single biggest operational headache in Luxembourg FATCA reporting. The ACD page states clearly that from reporting year 2020 onward (filed by 30 June 2021), declarations submitted with missing US TINs will result in an IRS notification for administrative and minor errors.

If the institution does not provide the missing TINs within 120 days of that notification, the IRS evaluates whether a “significant non-compliance” exists. The IRS considers the institution’s reasons for not obtaining TINs, the procedures it has in place to collect them, and the efforts it has made. Where the IRS determines significant non-compliance, the institution has a further 18 months from the date of that notification to correct it before being designated a Non-Participating Foreign Financial Institution. NPFFI designation triggers GIIN cancellation and 30% withholding on US-source income. In practice, that 18-month window is where serious remediation happens — targeted outreach campaigns, documented collection procedures, and escalation to governance committees.

In 2021, the ACD communicated new TIN codes developed by the IRS to explain why a TIN could not be obtained. Use of these codes is not mandatory for Luxembourg institutions, but the ACD recommends it. The ACD also accepts the IRS ICMM (International Compliance Management Model) FAQ guidance, specifically Q1, Q1a, Q1b, and Q3 of the “Populating the TIN Field” section. This includes the possibility of populating the TIN field for a Passive NFFE with a non-US TIN, or with “NA” if no TIN is available. These provisions complement, but do not replace, the instructions in Section 3.6.6 of ECHA 3.

IRS Notice 2023-11 introduced transitional measures for TIN collection. The ACD encourages Luxembourg institutions to comply with Sections 3.03 and 3.04 of that notice, to avoid discriminatory treatment of US citizens who do provide their TINs, and encourages US citizens residing in Luxembourg to provide their TINs when requested.

Due Diligence: Identifying US Accounts

The due diligence procedures are defined in Annex I of the Luxembourg-US IGA. They require institutions to review their existing accounts and apply specific procedures to new accounts to identify US Reportable Accounts.

US Indicia for Individual Accounts

For pre-existing individual accounts, the IGA requires searching for US indicia, which are indicators that the account holder may be a US person. These include:

  • US citizenship or residence status
  • A US place of birth
  • A current US mailing or residence address
  • A current US telephone number
  • Standing instructions to transfer funds to a US account
  • A current power of attorney or signatory authority granted to a person with a US address
  • A US “in-care-of” or “hold mail” address that is the sole address on file

This is where teams commonly get it wrong. Finding a single US indicium does not automatically make the account reportable. The institution can “cure” the indicium through a self-certification (W-8BEN, W-9, or equivalent) or documentary evidence. But the cure must be on file. An institution that finds US indicia and does nothing, neither reporting the account nor obtaining a cure, is in the worst possible position: non-compliant with both the reporting obligation and the due diligence obligation.

Entity Accounts and Controlling Persons

Entity classification is the more complex layer. Every entity account holder must be classified as either a Financial Institution, an Active NFFE, or a Passive NFFE. If an entity is a Passive NFFE, the institution must look through to its Controlling Persons and determine whether any are US persons.

The classification relies on self-certification. The entity tells the institution what it is. The institution is expected to assess whether that self-certification is reasonable given the information it holds. “Reasonable” is where the grey area lives. An entity that self-certifies as an Active NFFE because it has an operating business, but whose financial statements show 90% passive investment income, should trigger a reasonableness challenge. Many institutions accept self-certifications at face value without cross-checking against available data. That is a due diligence failure.

Self-Certifications and Validity

Self-certifications (W-8 and W-9 forms, or equivalent declarations) must be obtained at account opening for new accounts. For pre-existing accounts, they are required when a change in circumstances makes existing documentation unreliable. There is a common misconception that self-certifications expire after three years across the board. The rules are more specific: W-8BEN forms for individuals generally expire at the end of the third calendar year following the year they are signed, unless a change in circumstances occurs earlier. Some forms, like the W-8BEN-E for entities, have different validity rules depending on the withholding agent’s status and the nature of the income. Reporting teams should not apply a blanket three-year expiry without checking the specific form type and context.

Filing with the ACD: Channel, Format, and Transmitters

FATCA declarations are submitted to the ACD exclusively through approved electronic channels. There is no paper filing option. There is no direct upload portal run by the ACD itself. Instead, filings go through one of two approved transmitters:

  • Fundsquare (a subsidiary of the Luxembourg Stock Exchange), through their e-FILE product
  • Worldline Financial Services (Europe) S.A., through their SOFiE product

Both transmitters provide secure channels for XML file transmission. The XML schema follows the format defined in ECHA 3, with the Luxembourg-specific schema FATCA_LUX_V3.0. This is not identical to the IRS FATCA XML schema. The Luxembourg schema wraps the standard FATCA data elements in a Luxembourg-specific envelope for ACD processing. Institutions that generate their XML using generic FATCA schema tooling, without adjusting for the Luxembourg envelope, will have their submissions rejected at the transmitter level.

Zero Reporting

Since 1 January 2021, the amended loi du 24 juillet 2015 requires Luxembourg Reporting Financial Institutions that do not hold any US Reportable Accounts to submit a zero-value message (ZeroReporting) to the ACD. This is mandatory. An institution cannot simply skip the filing because it has nothing to report.

For zero-value messages only, there is a third filing channel: MyGuichet.lu, the Luxembourg government’s interactive platform. MyGuichet offers a guided form for submitting the ZeroReporting message. It does not accept XML uploads for this purpose. Full FATCA declarations with reportable accounts cannot be filed through MyGuichet; those must go through Fundsquare or Worldline.

The ACD also maintains a pre-validation (test) platform for end-to-end testing between institutions and the ACD, accessible through the same secure channels used for production filings.

FATCA Filing Deadline in Luxembourg

The ACD states the deadline clearly: Luxembourg financial institutions must provide the information to the ACD annually, by 30 June following the end of the calendar year to which the information relates. For reporting year 2025 data, the deadline is 30 June 2026.

This 30 June deadline is the Luxembourg domestic deadline for submission to the ACD. The ACD then exchanges the data with the IRS under the terms of the IGA. The institution’s obligation is to file with the ACD by 30 June. Whether the ACD meets its own exchange deadline with the IRS is a government-to-government matter that does not change the institution’s filing obligation.

Teams should note that corrections and amendments after initial filing follow the mechanism described in Annex 2 of ECHA 3. The ACD expects corrections to be submitted through the same transmitter channel used for the original filing.

Common Luxembourg Failure Points

Across the FATCA reporting cycle, certain failure points recur in Luxembourg more than others. These reflect the specific characteristics of Luxembourg’s financial sector: a high concentration of fund structures, multi-entity groups, and cross-border account holders.

Entity Classification Errors

Luxembourg hosts thousands of investment vehicles, SPVs, holding companies, and securitization vehicles. Each needs a FATCA classification. The most common error is classifying an Investment Entity as a passive holding company (NFFE) or vice versa. The distinction turns on whether the entity is “managed by” a Financial Institution and whether its income is primarily from financial assets. In Luxembourg’s fund ecosystem, where management companies, AIFM-licensed managers, and third-party administrators interact, the “managed by” test is not always obvious. A reserved alternative investment fund (RAIF) managed by an authorized AIFM is almost certainly an Investment Entity. A family-owned SOPARFI with no external manager may be a Passive NFFE. The grey zone is wide.

Sponsored Entity Gaps

Luxembourg fund promoters often use Sponsoring Entity arrangements, where the management company or promoter registers with the IRS as a Sponsoring Entity and takes on FATCA obligations for its sponsored funds. The gap appears when funds are launched, restructured, or transferred between managers without updating the sponsoring arrangement. A fund that was sponsored by Manager A, but is now managed by Manager B, may be operating without valid FATCA registration if the sponsoring arrangement was not transferred or if Manager B did not register as a new Sponsoring Entity for that fund.

Late or Incomplete TIN Collection

As described above, the IRS TIN enforcement has tightened progressively. Luxembourg institutions that deferred TIN collection during the early FATCA years now face a backlog of accounts with missing US TINs. The ACD’s acceptance of the IRS ICMM FAQ guidance and new TIN codes offers some procedural flexibility, but it does not remove the underlying obligation. Institutions should document their TIN collection efforts for each account, because the IRS considers that documentation when evaluating significant non-compliance.

Change-of-Circumstances Failures

The due diligence obligation is not a one-time exercise. When an account holder’s circumstances change, such as a change of address to a US address, the addition of a US telephone number, or updated documentation showing US citizenship, the institution must treat the account as potentially reportable and follow the appropriate procedures. Many institutions rely on relationship managers to flag changes of circumstances, which means the process depends on whether the RM remembers and whether the compliance system has a trigger. Institutions with strong KYC/AML change-of-circumstances processes can often piggyback FATCA triggers onto those workflows. Those without them are exposed.

FATCA and CRS: Where They Intersect in Luxembourg

Luxembourg financial institutions file both FATCA and CRS (Common Reporting Standard) declarations with the ACD. The two frameworks share the same intellectual DNA: both derive from automatic exchange of information principles and require identifying account holders’ tax residence. But the operational details differ enough that treating them as a single process causes errors.

FATCA looks for US persons specifically. CRS looks for tax residents of any participating jurisdiction (which does not include the US). The due diligence procedures overlap but are not identical. FATCA uses US indicia; CRS uses a broader self-certification approach. The entity classification categories have similar names (Financial Institution, Active NFE, Passive NFE under CRS versus Active NFFE, Passive NFFE under FATCA) but the definitions are not perfectly aligned. An entity that is an Active NFFE under FATCA might not be an Active NFE under CRS, or vice versa.

The practical intersection that matters most: institutions can and should coordinate their onboarding self-certification forms to capture both FATCA and CRS information simultaneously. Most Luxembourg institutions use combined self-certification forms for this purpose. The risk is that a combined form that satisfies CRS requirements may not contain all the specific FATCA fields, particularly the information that triggers W-9 or W-8 collection from the account holder. Compliance teams should verify that their combined forms capture the data elements required by both frameworks separately.

Both FATCA and CRS filings go to the ACD, through the same approved transmitters (Fundsquare and Worldline). But they use different XML schemas and are separate filings. A FATCA filing does not satisfy the CRS obligation, and vice versa.

Practitioner Checklist for Luxembourg FATCA Reporting

Registration and Status

  • Confirm each entity in your group has a current, valid GIIN registered with the IRS
  • Verify Responsible Officer contact details are up to date in the IRS portal
  • Confirm each entity’s FATCA status (Reporting FI, Deemed-Compliant, Non-Reporting, Sponsored Entity) matches its current activities and structure
  • For Sponsoring Entity arrangements: verify the sponsoring registration covers all current sponsored entities
  • Deregister GIINs for dissolved, merged, or wound-down entities promptly

Due Diligence

  • Review self-certification collection rates for new accounts and pre-existing accounts
  • Verify that US indicia searches cover all seven IGA-defined indicators, not just address and nationality
  • Check that entity classifications are supported by self-certifications and cross-referenced against available financial data
  • Confirm change-of-circumstances triggers are active in your KYC/AML system and linked to FATCA review workflows
  • Track self-certification validity periods by form type, not by a blanket three-year rule

Filing

  • File by 30 June for the preceding calendar year
  • Use the FATCA_LUX_V3.0 schema as defined in ECHA 3 (applicable since 6 January 2021)
  • Submit through Fundsquare (e-FILE) or Worldline (SOFiE) for full declarations; MyGuichet for ZeroReporting only
  • Submit a ZeroReporting message if no US Reportable Accounts are held. This is mandatory, not optional
  • Use the ACD pre-validation platform for end-to-end testing before first production filing or after schema changes

TIN Management

  • Document TIN collection efforts for every account with a missing US TIN
  • Consider using the IRS TIN codes recommended by the ACD to explain missing TINs
  • Monitor for IRS notifications (received via the ACD) and respond within the 120-day window
  • Apply IRS Notice 2023-11 transitional provisions where applicable, and document compliance with Sections 3.03 and 3.04

Frequently Asked Questions

Does every Luxembourg entity need a GIIN?

No. Only Reporting Financial Institutions and certain deemed-compliant categories that are required to register with the IRS need a GIIN. Non-Reporting Financial Institutions listed in Annex II of the Luxembourg-US IGA, such as certain governmental entities, the BCL, and qualifying retirement funds, do not need to register. However, entities should verify their specific category against Annex II rather than assuming they are exempt.

What happens if my institution files FATCA but with missing US TINs?

From reporting year 2020 onward, the IRS sends an administrative notification through the ACD identifying the missing TINs. The institution has 120 days to provide them. If it cannot, the IRS evaluates whether significant non-compliance exists. Where significant non-compliance is determined, the institution has a further 18 months from the date of that notification to correct it before being designated a Non-Participating Foreign Financial Institution, which brings GIIN cancellation and 30% withholding on US-source income.

Is the ZeroReporting message mandatory?

Yes. Since 1 January 2021, the amended Luxembourg FATCA law requires all Reporting Financial Institutions to submit a ZeroReporting message to the ACD if they hold no US Reportable Accounts. ZeroReporting can be filed through Fundsquare, Worldline, or MyGuichet.lu.

Can I file FATCA declarations directly with the ACD?

No. The ACD does not operate a direct upload portal for FATCA. All filings must go through one of the approved transmitters: Fundsquare (e-FILE) or Worldline (SOFiE). The exception is ZeroReporting, which can also be submitted via MyGuichet.lu using their guided form.

What is the annual FATCA filing deadline in Luxembourg?

The ACD requires FATCA declarations to be submitted by 30 June following the end of the reporting calendar year. For example, reporting year 2025 data is due by 30 June 2026.

How does FATCA interact with CRS reporting?

Both are filed with the ACD through the same transmitters, but they are separate filings using different XML schemas. FATCA targets US persons; CRS targets tax residents of other participating jurisdictions. The entity classification categories are similar but not identical. Institutions should coordinate their onboarding forms to capture both FATCA and CRS data but must file separate declarations for each framework.

Which XML schema applies to Luxembourg FATCA filings?

Luxembourg uses the FATCA_LUX_V3.0 schema as defined in circular ECHA n° 3 du 10 août 2020, which has been applicable since 6 January 2021. This is a Luxembourg-specific schema that wraps standard FATCA data elements in a Luxembourg envelope. It is not identical to the IRS FATCA XML schema used for direct reporting jurisdictions.

My entity changed its FATCA status mid-year. What do I file?

The FATCA status that applies determines the obligations for the period it was in effect. If an entity transitions from Non-Reporting to Reporting Financial Institution status, it should consult the ACD’s Division échange de renseignements (aeoi@co.etat.lu, +352 247-52459) for guidance on the transitional filing requirements. Do not assume a mid-year transition means no filing is required for that year.

Related Articles

  • DAC6 Mandatory Disclosure Rules – How Luxembourg implements the EU’s mandatory disclosure regime for cross-border tax arrangements, including the interaction with automatic exchange frameworks
  • DAC7 Reporting for Luxembourg Platform Operators – The reporting obligations for digital platform operators under DAC7, another automatic exchange framework operating alongside FATCA and CRS
  • CARF Crypto Tax Reporting – The upcoming Crypto-Asset Reporting Framework, which extends automatic exchange of information principles to crypto-asset transactions
  • AML Reporting in Luxembourg – Luxembourg’s anti-money laundering reporting obligations, which share due diligence overlap with FATCA account holder identification
  • CSSF Reporting Calendar Q2 2026 – The broader Luxembourg regulatory reporting calendar, including tax reporting deadlines

Key Takeaways

  • Luxembourg operates under a Model 1 IGA with the US, signed 28 March 2014 and implemented by the loi du 24 juillet 2015. Institutions report to the ACD, not directly to the IRS.
  • Every Luxembourg Reporting Financial Institution must register with the IRS and obtain a GIIN. Responsible Officer data must be kept current.
  • The annual FATCA filing deadline is 30 June following the end of the reporting calendar year.
  • Filings go exclusively through approved transmitters (Fundsquare or Worldline). ZeroReporting can also use MyGuichet.lu.
  • ZeroReporting is mandatory since 1 January 2021. Institutions with no US Reportable Accounts cannot simply skip the filing.
  • Missing US TINs trigger an IRS notification with a 120-day remediation window. Failure to remediate can lead to significant non-compliance designation and GIIN cancellation.
  • Entity classification errors, particularly the Investment Entity versus NFFE distinction, are the most common operational mistake in Luxembourg’s fund-heavy financial sector.
  • FATCA and CRS are separate filings with separate schemas. Coordinate onboarding forms, but do not assume one filing satisfies the other.

Sources and References

Disclaimer: The information on RegReportingDesk.com is for educational and informational purposes only. It does not constitute legal, regulatory, tax, or compliance advice. Always consult your compliance officer, legal counsel, or the relevant supervisory authority for guidance specific to your institution.

Similar Posts