On 12 October 2026 the CSSF relayed the Ministry of Justice’s communiqué of 7 October 2026 announcing the Luxembourg terrorist financing NRA: the 2026 National Risk Assessment of Terrorist Financing, which covers the observation period 2021 to 2024. The report rates the sub-sectors within the scope of the Law of 12 November 2004 for inherent…
On 1 October 2026 the German Federal Financial Supervisory Authority (BaFin) started publishing a tabular overview of which guidelines issued by the European Supervisory Authorities (ESAs) and by the EU Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) it has adopted into its administrative practice, and which it has not. In the…
Modelo 196 reporting in Spain has run monthly since the January 2026 reference month. Orden HAC/747/2025 of 27 June 2025, issued by the Ministry of Finance and published in the BoletÃn Oficial del Estado (BOE) on 15 July 2025, approved a new Modelo 196, whose title opens with “Declaración informativa mensual de cuentas en toda…
On 1 October 2026 the Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) announced that it had finalised three sets of regulatory technical standards for the private sector and submitted them to the European Commission. The AMLA final RTS cover customer due diligence under Article 28(1) of Regulation (EU) 2024/1624 (the AMLR),…
On 28 September 2026 the CSSF published press release 26/19 announcing operational guidance for incident handling: nine rulebooks written jointly by cybersecurity experts from the High Commission for National Protection (HCPN, acting as ANSSI and as GOVCERT.LU), CIRCL, the CSSF and the ILR. The practical question for Luxembourg DORA entities is whether the CSSF incident…
The Luxembourg sanctions risk assessment that the CSSF drew to supervised firms’ attention in a communiqué of 24 September 2026 is the country’s first vertical risk assessment (VRA) of targeted financial sanctions (TFS) linked to terrorist financing (TF) and proliferation financing (PF). The Ministry of Finance led the exercise and released the report, titled “PF…
The FCA money mule review published on 23 September 2026, “Money mules: mule activity and cashing out findings”, reports that the 35 retail banks, building societies, challenger banks, payment institutions (PIs) and e-money institutions (EMIs) it surveyed offboarded 238,396 suspected money mules in 2025, up from 184,935 in 2023 and 233,269 in 2024. Its sharper…
On 11 September 2026 the European Payments Council opened a public consultation on version 0.1 of the proposed FRIDA scheme rulebook. The consultation period runs from 11 September to 10 December 2026. FRIDA, the FRaud Information Distribution Arrangement, is the EPC’s proposed scheme for exchanging fraud data between payment service providers on account-to-account transactions across…
From 1 April 2027, a Luxembourg payment institution or electronic money institution still using the current Excel-based reporting process, or a crypto-asset service provider authorised under Article 63 of MiCAR, must submit the reports covered by the new CSSF prudential reporting framework through eDesk; the previous reporting process for those reports will be discontinued. On…
On 14 July 2026 the Banque centrale du Luxembourg (BCL) confirmed it will take part in the European Central Bank’s digital euro pilot, joining the ECB and 18 other Eurosystem national central banks in a controlled test of a beta version of the digital euro. The same day the ECB named the 36 payment service…