Consumer Protection / Conduct regulatory updates from Luxembourg.
We track 92 Consumer Protection / Conduct updates from Luxembourg regulators, published by CSSF. The archive covers 61 warnings, 22 news items and 5 guidance notes. Most recent update: September 2026. Coverage runs from 2025 to 2026.
No description available.
Why this matters
This is a formal CSSF communication announcing the entry into force of transposed EU legislation (ECGT Directive) with a specific compliance date. The directive introduces new mandatory requirements for sustainability-related claims in consumer-facing communications across financial services.
No description available.
Why this matters
This is a regulatory warning issued by CSSF concerning identity theft and fraudulent misuse of Permira Management S.à r.l.'s name. Unknown persons are impersonating the legitimate, authorized alternative investment fund manager through fake contact channels (email, phone numbers) and fraudulent platforms (PHLmax,...
No description available.
Why this matters
The CSSF warning concerns identity theft and fraudulent misuse of Quintet Private Bank's name through fake websites and email addresses. While the content is relevant to AML/Financial Crime and Consumer Protection, it is administrative in nature—a standard regulatory alert to warn the public and legitimate customers...
No description available.
Why this matters
The CSSF warning concerns identity theft and fraudulent misuse of the names of two legitimate Luxembourg-regulated firms (ADEPA ASSET MANAGEMENT S.A. and ADEPA ASSET SERVICING Luxembourg S.A.).
No description available.
Why this matters
The CSSF has issued a warning about unknown persons fraudulently impersonating DAC Investments S.à r.l. using a fake website and email addresses. The warning clarifies that the legitimate company is not responsible for these activities.
No description available.
Why this matters
This is a CSSF warning against unknown persons fraudulently misusing the name and identity of TEIKO ASSET MANAGEMENT S.À R.L., an unauthorized alternative investment fund manager.
No description available.
Why this matters
This is a standard regulatory warning against an unlicensed entity (MelzaPay S.A.) claiming to offer financial services from Luxembourg without CSSF authorisation. The warning targets a specific fraudulent operator rather than establishing new obligations or precedent.
No description available.
Why this matters
The CSSF warning concerns a fraudulent website impersonating BVF CAPITAL S.à r.l., involving identity theft and illicit activities. While the warning addresses financial crime and consumer protection concerns, it is a standard administrative alert about a specific fraudulent operation rather than a binding obligation...
No description available.
Why this matters
The CSSF has issued a warning about unknown persons fraudulently impersonating ICI Invest S.A. using a fake website, email addresses, and phone numbers. The warning clarifies that the legitimate company is not responsible for these activities.
No description available.
Why this matters
CSSF warning about identity theft and fraudulent impersonation of a legitimate Luxembourg alternative investment fund manager. High urgency due to active fraud scheme using fake contact details and website to deceive consumers and investors.
No description available.
Why this matters
CSSF warning of identity theft and fraudulent impersonation of Luxembourg-registered company Molentis S.A. Fraudsters using fake website, email, and claiming false registered office. High urgency due to active fraud scheme targeting financial sector participants and potential customers.
No description available.
Why this matters
CSSF warning of identity theft and fraudulent impersonation of a legitimate tied agent. High urgency due to active fraud scheme using fake website and email addresses targeting clients of Gablau Invest Sàrl, requiring immediate awareness among market participants and consumers.
No description available.
Why this matters
CSSF warning against unauthorized entity claiming to provide investment services from Luxembourg. Critical for investor protection as 3cGroup operates without proper authorization and supervision. High urgency due to active illicit operations and potential fraud risk to consumers.
No description available.
Why this matters
CSSF warning about identity theft and fraudulent impersonation of legitimate investment firm. Fraudsters using fake website, emails, and phone number to deceive customers. High urgency due to active fraud scheme targeting financial services sector, requiring immediate awareness among regulated entities and consumers.
No description available.
Why this matters
CSSF warning about identity theft and fraudulent impersonation of Gekko Fund SICAV. Unknown persons misusing the fund's name through fake website, email addresses, and phone number to conduct illicit activities.
No description available.
Why this matters
CSSF warning of identity theft and fraudulent impersonation of legitimate investment firm. Fraudsters using fake websites to misrepresent Winvest International S.C.S., FIAR. High urgency due to active fraud scheme targeting consumers and potential reputational harm to legitimate entity.
Press release 26/15
Why this matters
This is an informational press release from CSSF announcing the judicial dissolution and liquidation of DIVERSIFIED ASSET MANAGEMENT S.A., an investment firm. The document details the court order, appointment of liquidator and official receiver, and procedures for eligible clients to claim compensation through the...
No description available.
Why this matters
CSSF warning about fraudulent impersonation of Luxempart S.A., a securities issuer. Unknown persons misusing the company name for identity theft and illicit activities. High urgency due to active fraud scheme targeting investors and stakeholders, requiring immediate awareness across financial institutions.
No description available.
ESMA has withdrawn its MiFID II/MiFIR market data Guidelines because their subject matter has been transposed into Commission Delegated Regulation (EU) 2025/1156 on the obligation to make market data available on a reasonable commercial basis. As a result, CSSF Circular 21/783, which implemented those ESMA Guidelines in Luxembourg supervisory practice, will become formally outdated from 23 August 2026, requiring MiFID firms and trading venues to ensure their policies and commercial terms now fully align with the directly applicable RTS in the Delegated Regulation.
Non-compliance will now be assessed directly against binding RTS under Delegated Regulation (EU) 2025/1156, increasing enforcement risk if market data is priced or provided on terms that are not objectively “reasonable” or non‑discriminatory. Firms that fail to adapt their frameworks by 23 August 2026 risk supervisory findings, potential sanctions, and challenges to their market data commercial models.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
Why this matters
CSSF warning of identity theft and fraudulent impersonation of authorized Luxembourg asset manager. Multiple fraudulent contact channels (websites, emails, phone numbers) used to deceive consumers. High urgency due to active fraud scheme targeting investors, though informational in nature as a regulatory alert.
No description available.
Why this matters
CSSF warning of fraudulent website impersonating legitimate financial services company. Involves identity theft, illicit activities, and unauthorized financial services provision. Critical urgency due to active fraud threat to consumers and need for immediate awareness across financial sector.
No description available.
Why this matters
CSSF warning about fraudulent impersonation of Clearstream Banking S.A. using fake contact details. This is a financial crime alert requiring immediate awareness among market participants to prevent fraud victimization.
No description available.
Why this matters
ESMA supervisory briefing on triangular passporting under MiFID II, establishing common supervisory expectations for investment firms using branches/tied agents across multiple EU member states. Informational guidance on regulatory framework, firm responsibilities, and client protections.
Version of 13 July 2026
The CSSF has republished its MiFID II/MiFIR FAQ (Q&A) in a version dated 13 July 2026, consolidating guidance on investor protection, conduct of business, and reporting obligations applicable to Luxembourg MiFID firms. While the publication page itself is largely technical (cookies, website functioning), firms should treat the 13 July 2026 FAQ version as the current CSSF interpretative benchmark for MiFID II/MiFIR compliance, aligned with ESMA Q&As and recent EU‑level MiFID II/MiFIR review developments.
Non‑compliance with CSSF’s MiFID II/MiFIR expectations can lead to supervisory findings, remediation orders, administrative sanctions, and potential reputational damage, particularly where investor protection (suitability, inducements, best execution) is compromised. Given the 2026 EU‑level MiFID II/MiFIR review changes and the updated FAQ, firms that fail to update frameworks risk being assessed against a higher and more current supervisory benchmark.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
Why this matters
CSSF warning of identity theft and impersonation of regulated investment firm European Broker S.A. Luxembourg. Fraudsters using spoofed email address to conduct illicit activities. High urgency due to active fraud threat affecting multiple stakeholders and need for immediate awareness among market participants.
No description available.
Why this matters
CSSF warning against unauthorized entity Nexura VG operating without proper authorization to provide investment/financial services. High urgency due to active illicit operations and consumer protection risk, though not critical as it is a warning rather than emergency alert.
No description available.
Why this matters
CSSF warning against unauthorized entity SB Systems sp. Zo.o conducting fraudulent investment services from Luxembourg without authorization. Critical urgency due to active fraud alert requiring immediate awareness among regulated entities and consumers.
No description available.
Why this matters
CSSF warning about fraudulent website impersonating legitimate financial services firm MLA Consulting. Involves identity theft and illicit activities targeting consumers and potentially financial institutions.
No description available.
Why this matters
CSSF warning about fraudulent impersonation of regulated investment firm 2 PM EUROPE S.A. through fake website, email, and phone contact details. Identity theft and illicit activities pose direct risks to consumers and market integrity.
No description available.
Why this matters
Informational update from CSSF regarding the end of MiCA transition period for virtual asset service providers on 1 July 2026. Focuses on regulatory compliance requirements, consumer guidance on checking provider authorizations, and wind-down procedures for non-compliant providers.
No description available.
Why this matters
CSSF warning of fraudulent website impersonating legitimate Luxembourg financial services firm. Identity theft and illicit activities pose immediate risk to consumers and regulated entities. Critical urgency due to active fraud scheme requiring immediate awareness and protective action.
No description available.
Why this matters
CSSF warning of fraudulent website impersonating legitimate Luxembourg-based investment firms (Indylux Capital and Kherty Finance). Alert involves identity theft, illicit activities, and unauthorized use of company names across multiple jurisdictions.
No description available.
Why this matters
ESMA directive regarding wind-down of unauthorised crypto-asset service providers as MiCA transitional period concludes. High urgency due to regulatory deadline and mandatory compliance requirement for unauthorised providers, with emphasis on client asset safeguarding during transition.
No description available.
Why this matters
CSSF warning about identity theft and fraud targeting Luxembourg investment fund managers with German branches. Involves forged websites and financial guarantees.
No description available.
Why this matters
ESMA statement on Common Supervisory Action results regarding MiFID II sustainability integration in suitability assessments and product governance. Informational regulatory guidance with proportionate supervisory approach during sustainable finance framework transition. No immediate enforcement action indicated.
No description available.
Why this matters
CSSF warning of identity theft and fraudulent impersonation of authorized investment fund manager Nordea Investment Funds S.A. High urgency due to active fraud scheme using spoofed email addresses and phone numbers targeting potential investors/clients. Requires immediate awareness among market participants.
No description available.
Why this matters
CSSF warning against unauthorized crypto exchange operating without Luxembourg authorization. High urgency due to active illicit operations and consumer protection risk, though not critical as it is a warning rather than emergency alert.
No description available.
Why this matters
CSSF warning of fraudulent website impersonating regulated fund manager RBC Funds (Lux). Involves identity theft, illicit activities, and unauthorized use of legitimate company credentials. Critical urgency due to active fraud targeting investors and potential harm to regulated entity's reputation and customer trust.
No description available.
Why this matters
CSSF clarification on ML/FT risk management expectations, addressing de-risking practices and financial inclusion balance. Informational guidance to supervised entities on proper risk management frameworks rather than risk avoidance, with emphasis on proportionate customer assessment and cooperation requirements.
No description available.
Why this matters
CSSF warning about fraudulent website impersonating legitimate investment undertaking (Robus Umbrella). Involves identity theft and illicit activities targeting collective investment scheme. High urgency due to active fraud threat to consumers and potential reputational harm to regulated entity.
No description available.
Why this matters
CSSF warning of identity theft and fraudulent impersonation of authorized alternative investment fund manager. Unknown persons misusing legitimate firm's name and contact details to conduct illicit activities.
Administrative sanction imposed on Stonehage Fleming Luxembourg S.A.
The CSSF has announced that an **administrative sanction was imposed on Stonehage Fleming Luxembourg S.A. on 5 March 2026**, but it has not yet published the underlying decision or grounds. For compliance teams, this signals that the CSSF continues to actively use sanctions against Luxembourg wealth/asset management entities and that a detailed decision is likely forthcoming, which may contain important precedents on governance, AML/CFT or conduct requirements.
The specific financial and qualitative impact of this particular sanction is not yet public, but recent CSSF cases show that deficiencies in governance, delegate oversight and AML/CFT controls can lead to significant fines, public censure and supervisory follow-up. Non-compliance increases the likelihood of intrusive inspections, remediation programmes under CSSF scrutiny, and reputational risk with clients and counterparties.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
Why this matters
CSSF warning against unauthorized entity claiming to offer investment services without Luxembourg authorization. High urgency due to active illicit operations and consumer protection risk, though not critical as it is a warning notice rather than emergency alert.
No description available.
Why this matters
CSSF warning of fraudulent website impersonating legitimate wealth manager. Identity theft and illicit activities pose immediate risk to consumers and the legitimate firm's reputation. High urgency due to active fraud scheme targeting financial services clients.
No description available.
The CSSF has published a Feedback Report following a thematic review of the **valuation framework for less liquid and illiquid assets**, focused primarily on Luxembourg AIFMs managing AIFs in asset classes such as private equity, real estate, infrastructure, private debt and fund of funds, and on UCITS “trash ratio” positions under Article 41(2) of the UCI Law. All Luxembourg IFMs are explicitly expected to benchmark their existing valuation frameworks against the CSSF’s observations and recommendations and to implement corrective measures, with valuation risk confirmed as a key supervisory priority for 2026.
Failure to benchmark and remediate valuation frameworks for less liquid and illiquid assets exposes IFMs to material supervisory risk, including targeted reviews, formal remedial orders or sanctions, particularly given the CSSF’s designation of valuation risk as a key supervisory priority in 2026. Deficient valuation practices also heighten the risk of NAV errors, investor detriment and potential civil liability or reputational damage.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
Why this matters
CSSF warning against unauthorized entity claiming to provide investment services without Luxembourg authorization. High urgency due to active illicit operations and consumer protection risk. Entity operating across multiple financial service categories without proper licensing.
amending the regulatory technical standards laid down in Delegated Regulation (EU) 2019/979 as regards updating the list of data necessary for the classification of prospectuses and the list of information that can be incorporated by reference into prospectuses
Commission Delegated Regulation (EU) 2026/395 of 23 February 2026 amends the Prospectus Regulation RTS in Delegated Regulation (EU) 2019/979 to update: (i) the **data set used for ESMA classification and filing of prospectuses** and (ii) the **categories of information that may be incorporated by reference** into a prospectus. For compliance teams in Luxembourg and across the EU, this means prospectus production, filing templates, and reference documentation frameworks must be revised so that all new prospectuses and supplements meet the updated RTS data and incorporation-by-reference standards under Regulation (EU) 2017/1129.
Non‑compliance can lead to prospectus approval delays, rejection of filings, or required resubmissions, which may disrupt issuance timetables and investor communications. Persistent or material breaches may expose firms and issuers to supervisory measures, sanctions, and reputational risk for failing to meet Prospectus Regulation standards.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
Why this matters
CSSF warning of fraudulent website impersonating authorized alternative investment fund manager. Identity theft and illicit activities pose direct risk to consumers and market integrity. High urgency due to active fraud scheme targeting legitimate firm's reputation and potential investor harm.
No description available.
Why this matters
This warning from the CSSF relates to potential illicit activities by an unauthorized entity operating a website called 'werdy.net', which is offering investment services or other financial services without authorization in Luxembourg.
No description available.
Why this matters
This regulatory warning concerns fraudulent activities misusing the name of a licensed crypto-asset service provider and electronic money institution, Coinbase Luxembourg S.A.
No description available.
Why this matters
This warning concerns an unauthorized entity named Afitaustin that is allegedly providing investment services or other financial services without authorization in Luxembourg. This poses risks to consumers and could involve illicit activities, requiring a high level of urgency.
No description available.
Why this matters
This is a warning from the CSSF about a potentially fraudulent website called Nuveramix, which is not authorized to provide investment or financial services in Luxembourg. This is a high urgency issue as it involves potential financial fraud targeting consumers.
on key information documents for packaged retail and insurance-based investment products
Why this matters
This regulatory update relates to the Law of 17 April 2018 on key information documents for packaged retail and insurance-based investment products, which impacts firms in the banking, investment management, and insurance sectors.
No description available.
Why this matters
This regulatory update provides a list of members of the CPDI, which is relevant for firms in the banking, investment management, and wealth management sectors. The topics covered include AML/financial crime, consumer protection, and authorization/licensing, which are important for these types of firms.
Application of the Guidelines of the European Securities and Markets Authority for the criteria on the assessment of knowledge and competence under the Markets in Crypto Assets Regulation (MiCA) (ESMA35-24871704-2922)
Circular CSSF 26/909 specifies how the CSSF applies ESMA's Guidelines (ESMA35-24871704-2922) for assessing **knowledge and competence** criteria under MiCA, targeting staff involved in crypto-asset services. It matters because it enforces MiCA's staff certification requirements, ensuring Luxembourg CASPs meet EU-wide standards for consumer protection and operational integrity amid the full MiCA rollout on 30 December 2024.
Urgency: High – With publication today (1 April 2026) and MiCA's CASP regime live since 30 December 2024, firms face immediate supervisory scrutiny during licensing and VASP transitions ending 1 July 2026. Non-compliance risks authorization denial, enforcement, or operational halts, especially as CSSF audits dossiers for competence gaps amid Luxembourg's role as MiCA hub.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
Why this matters
This regulatory update from the CSSF focuses on improving financial education and empowerment, particularly for women, through a walking challenge program. It covers consumer protection, sustainability, and technology aspects relevant to banks, wealth managers, and fintechs.
Version of 9 March 2026
The CSSF Technical FAQ on Regulation No 20-08 provides implementation guidance on **loan-to-value (LTV) limits for residential real estate credit in Luxembourg**, establishing borrower-based macroprudential measures designed to limit leverage in the mortgage market. This guidance is critical for lenders operating in Luxembourg as it clarifies how to calculate own funds, determine LTV compliance, and apply temporary portfolio exemptions that have been extended through June 30, 2025.
Urgency: HIGH
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
(first publication: 30 October 2024)
Why this matters
This is a warning from the CSSF about fraudsters misusing the name of the CSSF Board Chair to contact supervised entities. It is relevant for banks, wealth managers, and all financial firms that may be targeted by such fraud attempts. The warning covers consumer protection, AML, and operational resilience topics.
Out-of-court consumer complaint resolution
Why this matters
This regulatory update from the CSSF covers consumer protection and financial crime issues, which are relevant for banking, wealth management, and fintech firms. The medium urgency reflects the ongoing nature of these compliance requirements.
No description available.
Why this matters
This is a warning from the CSSF about fraudulent activities misusing the name of JPMorgan Asset Management (Europe) S.à r.l., an investment management firm. It involves identity theft, illicit activities, and impersonation, which pose risks to consumers and the financial sector.
in relation to additional liquidity management requirements for Luxembourg-domiciled UCITS, or where applicable their management company, and Luxembourg-authorised AIFMs that manage open-ended AIFs, introduced by the Law of 3 March 2026, transposing Directive (EU) 2024/927 of the European Parliament and of the Council…
Why this matters
This regulatory update introduces new liquidity management requirements for UCITS and open-ended AIFs in Luxembourg, which is relevant for investment managers and banks operating in the investment fund industry.
No description available.
Why this matters
This is a warning from the CSSF regarding a fraudulent website impersonating a Luxembourg-based bank, Sumitomo Mitsui Trust Bank (Luxembourg) S.A. This poses risks of identity theft and illicit activities, which is of high importance for banks and wealth managers to be aware of.
No description available.
Why this matters
This is a warning from the CSSF regarding a fraudulent website impersonating a legitimate electronic money institution, VIVID MONEY S.A. The warning covers identity theft and illicit activities, which are relevant to AML/financial crime and consumer protection.
Situation as at 31 January 2026
Why this matters
This regulatory update provides a breakdown of UCIs (Undertakings for Collective Investment) registered in Luxembourg by reference currency. It is informational in nature, covering statistics and data related to the investment management industry, banking, and wealth management firms operating in Luxembourg.
No description available.
Why this matters
This is a warning from the CSSF regarding fraudulent websites impersonating a regulated investment firm, which poses risks of identity theft and illicit activities. It is a high-urgency issue for banks, wealth managers, and fintechs that may be targeted or impersonated by such scams.
No description available.
Why this matters
This warning concerns a fraudulent website impersonating a legitimate investment firm, which poses risks of identity theft and illicit activities. It is relevant to banking, investment management, and wealth management firms, as well as fintechs, and requires prompt attention due to the potential for consumer harm.
Administrative sanction imposed on an investment firm
The CSSF imposed an administrative sanction on 8 October 2025 against an unnamed investment firm, as detailed in a publication released on 4 March 2026. This enforcement action underscores CSSF's rigorous oversight of investment firms, particularly in areas like AML/CFT compliance, conduct rules, and organizational requirements, serving as a warning for similar entities to strengthen cooperation and internal controls. It matters because it highlights escalating fines for repeated or material breaches, potentially influencing supervisory expectations across Luxembourg's financial sector.
Urgency: High - This matters due to CSSF's pattern of publicizing nominative sanctions (e.g., Max Gain Capital, Zeus Asset Management), signaling increased scrutiny on investment firms amid AML/CFT and conduct risks. Fines (EUR 10,000–127,500) represent material hits (up to 10% of turnover), with factors like poor cooperation amplifying penalties; firms with similar exposures face elevated inspection risk, especially post-2025 enforcement wave.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
No description available.
Why this matters
This directive establishes a public register of the audit profession in the EU, which is relevant for banking, investment management, and wealth management firms that are subject to audit requirements. The topics covered include AML/financial crime, consumer protection, and reporting/disclosure obligations.
No description available.
Why this matters
This is a warning from the CSSF about fraudulent activities carried out by an unauthorized entity called Aisbierg Ennerstetzung Bank, which is posing as a financial services provider.
No description available.
Why this matters
This is a warning from the CSSF about fraudulent activities by persons misusing the name of MERITUM CAPITAL, a Luxembourg-based investment management firm. The warning covers identity theft, illicit activities, and the use of unauthorized websites and email addresses.
No description available.
Why this matters
This warning concerns a fraudulent website impersonating a legitimate investment firm, which poses risks of identity theft and illicit activities. It is a high-priority issue for banks, wealth managers, and fintechs that may be targeted or impacted by this scam.
No description available.
Why this matters
This warning concerns a fraudulent website impersonating a legitimate investment management firm, which poses risks of identity theft and illicit activities. It is a high-urgency issue for firms in the banking, investment management, and wealth management sectors that need to be aware of this scam and take appropriate...
No description available.
Why this matters
This warning from the CSSF relates to potential illicit activities associated with the website www.qatari.xyz, which is not authorized to provide investment or financial services in Luxembourg. This is a high-urgency issue for banks, wealth managers, and fintechs that may be impacted by this unauthorized entity.
No description available.
Why this matters
This warning concerns fraudulent activities by an unauthorized entity, Minea Global Finance SA, which is not supervised by the CSSF and has not been granted any authorization to provide investment or financial services in Luxembourg. This poses a high risk to consumers and the financial system.
Situation as at 31 December 2025
Why this matters
This regulatory update from the CSSF provides monthly statistics on the net assets of Undertakings for Collective Investment (UCIs), which are investment funds. This information is relevant for investment management firms, banks, and wealth managers that operate or invest in these types of funds.
Situation as at 31 December 2025
Why this matters
This regulatory update provides a breakdown of UCIs (Undertakings for Collective Investment) registered in Luxembourg by reference currency. It is an informational update for investment management firms, banks, and wealth managers that operate in the Luxembourg market.
No description available.
Why this matters
This regulatory update provides a list of investment funds (UCIs and SIFs) that have a sharia-compliant policy, which is relevant for investment management and wealth management firms.
No description available.
Why this matters
This warning concerns a fraudulent website impersonating a legitimate financial services firm, which poses risks of identity theft and illicit activities. It is relevant for banks, wealth managers, and fintechs that may be targeted or impersonated in such scams.
No description available.
Why this matters
This regulatory update warns about online financial frauds and scams in an artificial intelligence world, which is highly relevant for banking, investment management, and wealth management firms, as well as fintechs and crypto exchanges that operate in the digital finance space.
No description available.
Why this matters
This regulatory update from the CSSF warns about crypto frauds and scams, which is relevant for crypto exchanges and all firms dealing with crypto assets. It covers consumer protection and AML/financial crime topics.
No description available.
Why this matters
This is a warning from the CSSF regarding an unauthorized entity, Castleforbes Wealth Limited, that is allegedly providing investment services without proper authorization in Luxembourg.
No description available.
Why this matters
This regulatory update provides information on a registration form for meetings with UCI Departments of the CSSF, which is relevant for financial firms in the banking, investment management, and wealth management sectors.
No description available.
No description available.
No description available.
Why this matters
This is a warning about fraudulent activities misusing the name of a specific investment fund, which is relevant for investment managers and wealth managers who need to be aware of such scams to protect their clients.
No description available.
Why this matters
This regulatory update from the CSSF relates to a product intervention measure taken by the German regulator BaFin regarding turbo certificates. It impacts the marketing, distribution and sale of these products to retail clients in Germany, which is relevant for banking, investment management and capital markets firms...
No description available.
Why this matters
This regulatory update relates to the registration of EU/EEA mortgage credit intermediaries operating in Luxembourg under the freedom to provide services, which is relevant for banking, credit, and mortgage lending firms.
No description available.
Why this matters
This regulatory update from the CSSF provides guidance for 'finfluencers' on responsible promotion, which is relevant for investment management firms, wealth managers, banks, and fintechs that engage in digital marketing and social media activities.
Rules applicable to undertakings for collective investment when they employ certain techniques and instruments relating to transferable securities and money market instruments
Circular CSSF 08/356, as amended by Circular CSSF 25/901, establishes detailed rules for Luxembourg undertakings for collective investment (UCIs), including UCITS and alternative investment funds (AIFs), on the use of techniques and instruments relating to transferable securities and money market instruments, such as securities lending, repo transactions, and over-the-counter (OTC) derivatives. It matters because it ensures investor protection, risk management, and market stability by imposing strict eligibility, collateral, and operational requirements, aligning Luxembourg funds with EU standards under UCITS and AIFMD directives. Compliance is critical for Luxembourg-domiciled funds engaging in these activities to avoid regulatory sanctions and operational disruptions.
Urgency: High - Immediate relevance for funds actively using these techniques (common in fixed-income and equity strategies for yield enhancement). Non-compliance risks CSSF fines (up to 5% of NAV), temporary prohibitions on techniques, or fund suspension. With the 01 January 2026 effective date recently passed (as of current context), firms face heightened scrutiny in 2026 reporting cycles; proactive remediation avoids enforcement actions amid CSSF's focus on operational resilience.
AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.
Press release 25/18
Why this matters
This regulatory update discusses a supply-chain attack targeting NPM packages, which could impact firms across the financial services sector. It is relevant for banks, fintechs, and all firms that rely on third-party software and services.
Press release 25/04
Why this matters
This regulatory update warns about loan scams on social media, which is relevant for banking, consumer credit, and mortgage lending firms. It covers consumer protection and anti-money laundering topics, and is applicable to banks, fintechs, and all firms that engage in lending activities.
Press release 25/03
Why this matters
This regulatory update relates to the takeover of Iris Financial S.A. by Younited Financial S.A., which are firms operating in the banking, investment management, and wealth management sectors. The key topics covered include authorization and licensing, prudential/capital requirements, and consumer protection.