AML/CFT

  • CSSF de-risking communique: managing ML/FT risk instead of avoiding it, what Luxembourg-regulated firms must address in their AML/CFT frameworks

    Last updated: June 2026 A relationship manager flags a client as awkward. The country profile is messy, the ownership chain runs through two jurisdictions, and the file would take real work to keep current. The easy answer is to exit. Close the account, decline the onboarding, and the risk number on the dashboard goes down….

  • CSSF AML/CFT Sanction: Enforcement Lessons From the March 2026 Fine

    Last updated: June 2026 A CSSF AML/CFT sanction rarely turns on an exotic typology. It turns on the housekeeping. The administrative fine the CSSF imposed on 5 March 2026, and published on a nominative basis on 9 June 2026, is a clean example. A Luxembourg specialised professional of the financial sector running a domiciliation business…

  • AMLA Direct Supervision: Which Obliged Entities the CSSF Will Identify

    Last updated: June 2026 The most expensive scoping mistake a Luxembourg compliance team can make right now is assuming someone else will flag it for AMLA direct supervision. The Authority for Anti-Money Laundering and Countering the Financing of Terrorism picks its first set of directly supervised firms in 2027, and the data that feeds that…

  • MiCAR Reporting Obligations for CASPs: Complete Implementation Guide

    Last updated: March 2026 Introduction MiCAR (Markets in Crypto-Assets Regulation) creates the first comprehensive regulatory framework requiring crypto-asset service providers to implement authorization, prudential reporting, transaction monitoring, and incident notification systems. The Markets in Crypto-Assets Regulation (Regulation (EU) 2023/1114) represents the first unified rulebook for crypto-asset activities across the entire European Union. For reporting teams…

  • AML Reporting in Luxembourg: STRs, GoAML, and Your Obligations

    Last updated: March 2026 Introduction AML reporting in Luxembourg is mandatory for every regulated financial institution and obliged entity – failure to file suspicious transaction reports exposes your firm to regulatory sanctions, reputational damage, and legal liability. For compliance officers, risk managers, and AML practitioners in Luxembourg’s financial sector, understanding when and how to file…