CSSF Regulation 12-02

  • Luxembourg Terrorist Financing NRA 2026: Sector Ratings for Your BWRA

    On 12 October 2026 the CSSF relayed the Ministry of Justice’s communiqué of 7 October 2026 announcing the Luxembourg terrorist financing NRA: the 2026 National Risk Assessment of Terrorist Financing, which covers the observation period 2021 to 2024. The report rates the sub-sectors within the scope of the Law of 12 November 2004 for inherent…

  • Luxembourg Sanctions Risk Assessment: Screening Gaps the CSSF Flagged

    The Luxembourg sanctions risk assessment that the CSSF drew to supervised firms’ attention in a communiqué of 24 September 2026 is the country’s first vertical risk assessment (VRA) of targeted financial sanctions (TFS) linked to terrorist financing (TF) and proliferation financing (PF). The Ministry of Finance led the exercise and released the report, titled “PF…

  • CSSF Table B 4.6 Reporting: The 22 Named Functions Due by 20 January

    Every credit institution in the Luxembourg market files CSSF table B 4.6 at least annually: the table covers 22 specified functions and activities, the annual submission reflects the 31 December position and is due at the CSSF by 20 January of the following year, and changes to persons reported on B 4.6 during the year…

  • goAML Luxembourg: The CRF Reporting Workflow Explained

    goAML is Luxembourg’s electronic channel for suspicious-operation reporting and communication with the CRF; for lawyers, the platform integrates the Article 7 Bâtonnier filter before qualifying reports are forwarded to the CRF. In 2024 the CRF received significantly more suspicious reports than the prior year, according to its 2024 annual report. That same report covers the…

  • CSSF de-risking communique: managing ML/FT risk instead of avoiding it, what Luxembourg-regulated firms must address in their AML/CFT frameworks

    A relationship manager flags a client as awkward. The country profile is messy, the ownership chain runs through two jurisdictions, and the file would take real work to keep current. The easy answer is to exit. Close the account, decline the onboarding, and the risk number on the dashboard goes down. The CSSF communique of…

  • CSSF AML/CFT Sanction: Enforcement Lessons From the March 2026 Fine

    A CSSF AML/CFT sanction rarely turns on an exotic typology. It turns on the housekeeping. The administrative fine the CSSF imposed on 5 March 2026, and published on a nominative basis on 9 June 2026, is a clean example. A Luxembourg specialised professional of the financial sector running a domiciliation business was fined EUR 56,000…