Wealth & Private Banking regulatory updates from Luxembourg.
We track 177 Wealth & Private Banking updates from Luxembourg regulators, published by CSSF. The archive covers 130 news items, 27 warnings and 14 guidance notes. Most recent update: September 2026. Coverage runs from 2020 to 2026.
The CSSF warning concerns identity theft and fraudulent misuse of Quintet Private Bank's name through fake websites and email addresses. While the content is relevant to AML/Financial Crime and Consumer Protection, it is administrative in nature—a standard regulatory alert to warn the public and legitimate customers...
The CSSF warning concerns identity theft and fraudulent misuse of the names of two legitimate Luxembourg-regulated firms (ADEPA ASSET MANAGEMENT S.A. and ADEPA ASSET SERVICING Luxembourg S.A.).
The CSSF has issued a warning about unknown persons fraudulently impersonating ICI Invest S.A. using a fake website, email addresses, and phone numbers. The warning clarifies that the legitimate company is not responsible for these activities.
CSSF warning of identity theft and fraudulent impersonation of a legitimate tied agent. High urgency due to active fraud scheme using fake website and email addresses targeting clients of Gablau Invest Sàrl, requiring immediate awareness among market participants and consumers.
CSSF warning of identity theft and fraudulent impersonation of legitimate investment firm. Fraudsters using fake websites to misrepresent Winvest International S.C.S., FIAR. High urgency due to active fraud scheme targeting consumers and potential reputational harm to legitimate entity.
The CSSF has republished its MiFID II/MiFIR FAQ (Q&A) in a version dated 13 July 2026, consolidating guidance on investor protection, conduct of business, and reporting obligations applicable to Luxembourg MiFID firms. While the publication page itself is largely technical (cookies, website functioning), firms should treat the 13 July 2026 FAQ version as the current CSSF interpretative benchmark for MiFID II/MiFIR compliance, aligned with ESMA Q&As and recent EU‑level MiFID II/MiFIR review developments.
Key dates
02 March 2026
- Most revised MiFIR transparency requirements under the MiFID II/MiFIR review (amending Delegated Regulation) apply at EU level, influencing the content and focus of national FAQs and supervisory guidance, including CSSF’s
13 July 2026 Deadline
- CSSF publishes/updates the MiFID II/MiFIR FAQ version dated 13 July 2026, which becomes the current reference point for CSSF supervisory expectations on MiFID II/MiFIR compliance
Suggested considerations
Review the latest CSSF MiFID II/MiFIR FAQ (13 July 2026 version) in full, comparing it against existing internal MiFID II/MiFIR policies, procedures, and controls to identify gaps or misalignments.
Confirm and, where necessary, update client‑facing disclosures to clearly state whether investment services (especially advice and portfolio management) are provided on an independent or non‑independent basis, and ensure that inducement arrangements are consistent with this classification.
Reassess inducement frameworks (commissions, fees, non‑monetary benefits) for investment advice and portfolio management to ensure that no prohibited inducements are received or retained where services are independent or involve portfolio management.
Review and update product governance frameworks, including target market definition processes and product approval procedures, to ensure that each instrument’s intended target market is properly documented and consistently used by distributors.
Examine best execution policies to confirm they are clear, detailed, and understandable to clients, and implement or enhance ongoing monitoring mechanisms (e.g. execution quality reports, periodic reviews) to evidence compliance with best execution obligations.
What changed
Because the visible page content provided is limited to technical and cookie‑related information, the key points below focus on the regulatory substance of the CSSF MiFID II/MiFIR FAQ (Q&A) as the...
The CSSF confirms the application of MiFID II investor protection rules to Luxembourg investment service providers, including obligations on inducements, suitability, product governance, and best...
The FAQ reiterates that investment services providers must inform clients clearly whether their investment advice or services are provided on an independent or non‑independent basis, and explains the...
The FAQ clarifies that inducements are expressly prohibited when investment advice is provided on an independent basis and for portfolio management services, requiring firms to structure their...
The CSSF guidance reflects product governance obligations: manufacturers must define a target market for each financial instrument based on clients’ knowledge and experience, financial situation,...
Compliance impact
Non‑compliance with CSSF’s MiFID II/MiFIR expectations can lead to supervisory findings, remediation orders, administrative sanctions, and potential reputational damage, particularly where investor protection (suitability, inducements, best execution) is compromised. Given the 2026 EU‑level MiFID II/MiFIR review changes and the updated FAQ, firms that fail to update frameworks risk being assessed against a higher and more current supervisory benchmark.
Survey on the amount of covered deposits held on 30 June 2026
AI Analysis
CSSF-CPDI 26/51 announces the **regular CPDI/Fonds de garantie des dépôts Luxembourg (FGDL) survey of covered deposits as at 30 June 2026**, to be completed by Luxembourg FGDL member institutions. This quarterly data collection feeds directly into the risk-based, ex‑ante contribution methodology under the deposit guarantee framework and is operationally important for prudential planning, reporting controls, and funding of the FGDL.
Key dates
30 June 2026 Deadline
– Reference date for the covered deposits snapshot; all figures in the survey must reflect the amount of covered deposits outstanding at close of business on this date
Early July 2026 (TBD by CSSF circular text and technical annex)
– Expected opening of the reporting window for uploading the 30 June 2026 covered deposits survey via CSSF eDesk or other specified channels, in line with the timetable used in prior CPDI surveys
Mid–Late July 2026 (TBD by CSSF/CSSI reporting instructions)
– Likely cut-off date for submission of the 30 June 2026 survey, consistent with prior CPDI quarterly survey practices that require prompt post‑quarter reporting for FGDL purposes
Suggested considerations
Apply the EUR 100,000 coverage cap per depositor for the survey and ensure that non‑eligible deposits (such as certain financial sector deposits or specific categories excluded under the 2015 Law) are correctly filtered out of the covered deposits figures.
Reconcile the 30 June 2026 covered deposits data with internal finance, risk, and regulatory reporting systems to ensure consistency with other prudential data and FGDL contribution calculations.
Arrange for the survey report to be reviewed and formally approved by the institution’s governing body or the designated senior manager responsible for deposit guarantee scheme reporting, documenting the approval and any key assumptions or methodological choices.
Submit the completed 30 June 2026 covered deposits survey through the CSSF eDesk platform or other specified reporting channel within the deadline set by CSSF-CPDI 26/51 and any accompanying CPDI instructions.
Retain detailed working papers, data extracts, and methodology documentation supporting the 30 June 2026 survey in order to evidence compliance to CSSF, facilitate internal audit review, and support future FGDL ex‑ante contribution calculations.
What changed
- CSSF launches a new covered deposits data survey with reference date 30 June 2026, continuing the established quarterly reporting cycle used for FGDL funding and risk-based contribution...
Credit institutions incorporated under Luxembourg law, POST Luxembourg (for postal financial services), and Luxembourg branches of credit institutions from third countries must report the stock of...
The survey must be submitted via the CSSF reporting channels (CSSF eDesk platform or other specified electronic means), using the data templates and technical specifications communicated by the CPDI,...
Institutions that are members of the FGDL must ensure alignment between the survey data and the definition of “covered deposits” under the Law of 18 December 2015 on the failure of credit...
The circular reaffirms that data reported for the survey feed into the risk‑based ex‑ante contribution mechanism set out in CPDI circulars on FGDL contributions (e.g.
Compliance impact
Non-compliance with the 30 June 2026 covered deposits survey (late, incomplete, or inaccurate reporting) can trigger supervisory follow-up by the CSSF, impact the calculation of FGDL ex-ante contributions, and expose institutions to enforcement measures or reputational risk for weaknesses in deposit guarantee scheme reporting. Because covered deposits data underpin the adequacy of the deposit guarantee fund, supervisory scrutiny of data quality and governance over this survey is likely to be high.
CSSF warning of fraudulent website impersonating legitimate Luxembourg financial services firm. Identity theft and illicit activities pose immediate risk to consumers and regulated entities. Critical urgency due to active fraud scheme requiring immediate awareness and protective action.
The CSSF has introduced two **mandatory standardised application forms** for authorisation of UCITS **domestic mergers** under the Luxembourg Law of 17 December 2010 and **outbound cross‑border mergers** where the receiving UCITS is located in another EU Member State under Directive 2009/65/EC. From 19 June 2026, any new UCITS merger authorisation request of these types must use the new forms and be filed by email with the full supporting documentation required by the applicable UCITS merger provisions.
Key dates
19 June 2026
- CSSF communiqué published announcing the two new merger authorisation forms for UCITS domestic mergers and UCITS outbound cross‑border mergers
19 June 2026 Deadline
- **Start of mandatory use of the new forms** for all **new merger authorisation applications** filed with the CSSF; applications submitted from this date must use the new templates and be sent to amendments.uci@cssf.lu
Suggested considerations
Identify all current and planned UCITS domestic and outbound cross‑border merger projects and determine which will have CSSF authorisation requests submitted on or after 19 June 2026 so that the new forms are used.
Download and review in detail the “Application form for authorisation of a UCITS domestic merger” and “Application form for authorisation of a UCITS outbound cross‑border merger” and map each field of the forms to existing internal data sources and documents.
Update internal UCITS merger procedures and checklists to replace any existing CSSF filing templates with the new standardised forms and to include the requirement that all merger authorisation applications are submitted to amendments.uci@cssf.lu.
Train legal, product, operations and compliance staff involved in UCITS mergers on how to complete the new forms accurately, including coordination of information across the prospectus, KIIDs/KIDs, common draft merger terms, depositary statements and shareholder communications.
Review and, where necessary, update board and governance templates (board minutes, resolutions approving merger terms) to ensure they produce all information that the new forms require to be confirmed or attached.
What changed
- The CSSF has created a standardised “Application form for authorisation of a UCITS domestic merger” specifically for merger authorisation requests where both merging and receiving UCITS are...
The CSSF has created a standardised “Application form for authorisation of a UCITS outbound cross‑border merger” for mergers where the merging UCITS is Luxembourg‑authorised and the receiving UCITS...
Use of the two new forms is mandatory for all new merger authorisation applications submitted to the CSSF from 19 June 2026 onwards; legacy formats (ad‑hoc letters or bespoke templates) may no longer...
Each application form must be “duly completed” and accompanied by all documents required under the applicable UCITS merger regulations, including the common draft terms of merger, updated prospectus...
The CSSF has specified a centralised submission channel for these applications: completed forms and supporting documentation must be sent to amendments.uci@cssf.lu, aligning merger filings with the...
Compliance impact
Non‑compliance (e.g. using outdated templates or submitting incomplete forms) is likely to result in the CSSF treating the file as inadmissible or incomplete, delaying merger authorisation and potentially requiring postponement of planned merger effective dates. Repeated deficiencies or failure to comply with the standardised process may also raise supervisory concerns about the firm’s governance and regulatory controls around UCITS product actions.
Administrative sanction imposed on Stonehage Fleming Luxembourg S.A.
AI Analysis
The CSSF has announced that an **administrative sanction was imposed on Stonehage Fleming Luxembourg S.A. on 5 March 2026**, but it has not yet published the underlying decision or grounds. For compliance teams, this signals that the CSSF continues to actively use sanctions against Luxembourg wealth/asset management entities and that a detailed decision is likely forthcoming, which may contain important precedents on governance, AML/CFT or conduct requirements.
Key dates
05 March 2026
- CSSF imposes the administrative sanction on Stonehage Fleming Luxembourg S.A. (date of decision)
09 June 2026
- CSSF publicly announces the administrative sanction and the existence of a PDF decision (date of publication on CSSF website)
Suggested considerations
Monitor the CSSF website for publication of the detailed PDF decision relating to the administrative sanction of 5 March 2026 against Stonehage Fleming Luxembourg S.A.
Once available, review the full decision to identify the specific legal bases (e.g. LFS, Law of 2010, Law of 2013, AML/CFT Law) and control failures cited by the CSSF.
Map the identified weaknesses from the decision against your firm’s governance, internal control, delegate oversight and AML/CFT frameworks to identify any similar risk areas.
Update internal compliance risk assessments to reflect the enforcement themes highlighted in this and recent CSSF sanctions, including the weighting of enforcement risk for organisational and AML/CFT deficiencies.
Review and, where necessary, strengthen board and senior management oversight arrangements, including the documentation of decisions, challenge and escalation processes, in anticipation of CSSF expectations evidenced in the forthcoming decision.
What changed
At this stage, based on the CSSF notice alone, no new legal or regulatory requirements are introduced; the publication is a transparency notice that a sanction decision exists.
the Law of 5 April 1993 on the financial sector (LFS), the Law of 17 December 2010 on undertakings for collective investment, the Law of 12 July 2013 on AIFMs, and the Law of 12 November 2004 on the...
the CSSF’s established practice of publishing individual sanction decisions, which typically detail shortcomings in organisational requirements, internal controls, oversight of delegates, conduct of...
the legal provisions breached (for example, Articles 109–111 and 148 of the Law of 2010 or Articles 2-2, 3 and 8-4 of the AML/CFT Law, by analogy with other CSSF sanctions),
the factual deficiencies identified (e.g., weaknesses in governance, delegate oversight, AML risk assessment, customer due diligence), and
Compliance impact
The specific financial and qualitative impact of this particular sanction is not yet public, but recent CSSF cases show that deficiencies in governance, delegate oversight and AML/CFT controls can lead to significant fines, public censure and supervisory follow-up. Non-compliance increases the likelihood of intrusive inspections, remediation programmes under CSSF scrutiny, and reputational risk with clients and counterparties.
CSSF warning of fraudulent website impersonating legitimate wealth manager. Identity theft and illicit activities pose immediate risk to consumers and the legitimate firm's reputation. High urgency due to active fraud scheme targeting financial services clients.
The CSSF has published a Feedback Report following a thematic review of the **valuation framework for less liquid and illiquid assets**, focused primarily on Luxembourg AIFMs managing AIFs in asset classes such as private equity, real estate, infrastructure, private debt and fund of funds, and on UCITS “trash ratio” positions under Article 41(2) of the UCI Law. All Luxembourg IFMs are explicitly expected to benchmark their existing valuation frameworks against the CSSF’s observations and recommendations and to implement corrective measures, with valuation risk confirmed as a key supervisory priority for 2026.
Key dates
End 2023
– CSSF thematic review launched by dedicated questionnaire to IFMs, with work conducted through 2024 and 2025 (contextual start of the current thematic exercise)
Throughout 2024 and 2025
– CSSF conducts off‑site and on‑site work as part of the dedicated thematic review on valuation frameworks for less liquid and illiquid assets
2026 Deadline
– Valuation risk for less liquid and illiquid assets is confirmed as a key supervisory priority, implying heightened supervisory focus and potential follow‑up actions during the year; no hard implementation deadline is set but prompt action is implicitly expected
04 June 2026
– CSSF publishes the Communication and Feedback Report on the thematic review and formally expects IFMs to perform a benchmarking exercise and implement corrective measures as needed
Suggested considerations
Perform a structured benchmarking of existing valuation policies, procedures, methodologies and controls against the detailed observations and recommendations in the CSSF Feedback Report on valuation frameworks for less liquid and illiquid assets.
Document, at IFM and fund level, all identified gaps or weaknesses in the current valuation framework, including for AIFs in illiquid strategies and UCITS Article 41(2) trash ratio positions.
Develop and approve a remediation plan with clear owners, milestones and target dates to address identified shortcomings in valuation governance, methodologies, model validation, data sources and control processes.
Review and, where necessary, update valuation policies and procedures to ensure they explicitly cover less liquid and illiquid assets, stressed market conditions, use of external valuers, and documentation standards across the investment lifecycle.
Enhance valuation governance by clearly defining roles and responsibilities (including segregation from portfolio management where applicable), escalation procedures, and oversight by the board/senior management.
What changed
- The CSSF publishes a dedicated Feedback Report on the thematic review of valuation frameworks for less liquid and illiquid assets and formally expects IFMs to use it as guidance for implementing...
All Luxembourg IFMs are required to conduct a benchmarking exercise of their valuation frameworks against the CSSF’s observations and recommendations set out in the new Feedback Report.
Where gaps or weaknesses are identified through this benchmarking, IFMs are expected to implement corrective measures to strengthen their valuation policies, procedures and lifecycle controls for...
The thematic review scope formally covers AIFMs of AIFs investing in less liquid and illiquid assets (including private equity, real estate, infrastructure, private debt and fund of funds), and, on...
The CSSF explicitly links this thematic work to previous supervisory exercises (ESMA CSA on valuation, CSSF self‑assessment questionnaires, and on‑site inspection feedback) and consolidates...
Compliance impact
Failure to benchmark and remediate valuation frameworks for less liquid and illiquid assets exposes IFMs to material supervisory risk, including targeted reviews, formal remedial orders or sanctions, particularly given the CSSF’s designation of valuation risk as a key supervisory priority in 2026. Deficient valuation practices also heighten the risk of NAV errors, investor detriment and potential civil liability or reputational damage.
The CSSF has issued a feedback report on a thematic review of the **valuation framework for less liquid and illiquid assets**, signalling intensified supervisory focus on how Luxembourg investment fund managers value complex, hard‑to‑price positions. This matters because it will drive stricter expectations around valuation governance, model oversight, data validation, and the interaction between valuation, liquidity management, and investor protection for funds holding such assets.
Although the specific 2026 feedback report text is not yet available, it clearly follows and deepens the CSSF’s 2023 Feedback Report on ESMA’s CSA on Valuation and its 2026 supervisory priorities on valuation, with a narrower focus on less liquid and illiquid assets.
Key dates
18 July 2023
– CSSF publishes its Feedback Report on the ESMA Common Supervisory Action (CSA) on Valuation, setting out broad expectations for valuation frameworks, including for less liquid assets
31 December 2023 Deadline
– Deadline by which all IFMs managing UCITS and/or AIFs were required to complete a comprehensive assessment of their valuation frameworks and implement necessary corrective measures in line with the 2023 CSSF Feedback Report on valuation
Early 2026
– CSSF identifies valuation as an ongoing key supervisory priority for the investment fund sector in its 2026 priorities, with specific focus on IFM valuation organisation and processes
04 June 2026
– CSSF publishes the new Feedback Report on the thematic review of valuation frameworks for less liquid and illiquid assets, signalling renewed and more granular supervisory scrutiny of this area
TBD (2026–2027)
– CSSF is expected to conduct follow‑up supervisory work (off‑site reviews and on‑site inspections) to test implementation of its expectations on valuation of less liquid and illiquid assets; firms should plan remediation programmes within months rather than years
Suggested considerations
Conduct a comprehensive gap analysis of existing valuation policies and procedures against the CSSF’s feedback on valuation, with specific attention to less liquid and illiquid assets, and document all identified weaknesses and remediation actions.
Update and formally approve valuation policies and procedures to clearly define methodologies, model hierarchies, and data source selection for less liquid and illiquid assets, including explicit provisions for stressed market conditions.
Implement or enhance a formal valuation model governance framework for illiquid asset models, including independent model validation, periodic back‑testing, documentation of assumptions, and at least annual model reviews.
Review and, where necessary, redesign organisational arrangements to ensure the operational and hierarchical independence of the valuation function from portfolio management, and adjust remuneration policies to avoid performance‑linked incentives for valuation staff.
Strengthen controls over external pricing providers and external valuers by documenting selection criteria, performing initial and ongoing due diligence, challenging methodologies, and periodically back‑testing third‑party valuations of illiquid assets.
What changed
Based on the prior CSSF feedback on valuation and the indicated thematic focus, compliance teams should expect the following concrete expectations to apply specifically to less liquid and illiquid...
Investment fund managers must maintain concise, centralised, and comprehensive valuation policies and procedures that explicitly cover all asset types, including less liquid and illiquid instruments,...
Valuation policies must define and justify the valuation methodologies and models used for less liquid and illiquid assets, including the hierarchy of methods, model selection criteria, and...
Firms must perform robust model governance for valuation models used on less liquid and illiquid assets, including independent model review (by staff not involved in model development), back‑testing,...
Valuation frameworks must explicitly address stressed market conditions for illiquid and thinly traded assets, including triggers for stress conditions, alternative valuation methodologies under...
Compliance impact
Non‑compliance exposes firms to heightened risk of CSSF supervisory measures, including remediation orders, restrictions on activities, and possible enforcement actions, especially where valuation weaknesses have led or could lead to investor detriment. Given the CSSF’s explicit supervisory priority on valuation, firms with significant illiquid exposures should treat this as a high‑impact issue requiring proactive remediation and robust documentation.
This newsletter from the CSSF (Luxembourg financial regulator) covers a range of topics relevant to banking, investment management, and wealth management firms operating in Luxembourg. The low urgency reflects that this is an informational publication rather than a time-sensitive regulatory update.
This warning from the CSSF relates to potential illicit activities by an unauthorized entity operating a website called 'werdy.net', which is offering investment services or other financial services without authorization in Luxembourg.
This regulatory update is related to the progress of a liquidation, which is likely to impact banking, investment management, and wealth management firms. The topics covered include prudential requirements, reporting, and authorization, which are relevant for these sectors.
This regulatory update provides guidance on the additional information required for AIFMs to market AIFs, which is relevant for investment management and wealth management firms that manage and market alternative investment funds.
This regulatory update from the CSSF covers the EBA Guidelines and Recommendations, which are relevant for banking, investment management, and wealth management firms. The topics include prudential requirements, reporting, and authorization, indicating medium urgency for these regulated entities.
This warning concerns an unauthorized entity named Afitaustin that is allegedly providing investment services or other financial services without authorization in Luxembourg. This poses risks to consumers and could involve illicit activities, requiring a high level of urgency.
This regulatory update from the CSSF provides monthly statistics on the balance sheet total and provisional net results of support PFS (Professionals of the Financial Sector) firms.
This is a critical supply chain attack targeting the widely used Axios HTTP client library, which is central to many architectures. The compromise of the build pipeline can result in remote code execution, credential theft, and lateral movement within the information system.
This is a warning from the CSSF about a potentially fraudulent website called Nuveramix, which is not authorized to provide investment or financial services in Luxembourg. This is a high urgency issue as it involves potential financial fraud targeting consumers.
This law relates to the issuance of covered bonds, which is relevant for banks, wealth managers, and the broader financial sector. It covers prudential requirements, authorization, and reporting obligations, indicating a medium level of urgency for firms in the affected sectors.
on the operationalisation of European regulations in the area of financial services
Why this matters
This consolidated law on the operationalisation of European regulations in financial services is likely to impact banks, asset managers, and wealth managers across areas such as AML, prudential requirements, and licensing. The update indicates ongoing regulatory changes, warranting a medium level of urgency.
This regulatory update relates to the audit profession in Luxembourg, which is relevant for banking, investment management, and wealth management firms operating in the country. It covers prudential requirements, authorization and licensing, as well as governance standards for statutory auditors.
on the failure of credit institutions and certain investment firms
Why this matters
This regulatory update relates to the law on the failure of credit institutions and certain investment firms, which is being updated. It covers prudential and operational requirements, as well as authorization and licensing for banks, wealth managers, and asset managers.
relating to undertakings for collective investment
Why this matters
This regulatory update relates to the Luxembourg Law of 17 December 2010 on undertakings for collective investment, which is relevant for investment management firms, wealth managers, and banks operating in Luxembourg.
This regulatory update consolidates and amends the Law of 5 April 1993 on the financial sector, which is relevant for banks, wealth managers, and asset managers. The update covers prudential requirements, reporting obligations, and licensing/authorization, indicating medium urgency for affected firms.
This regulatory update provides information on the members of the Resolution Board, which is relevant for banks, wealth managers, and asset managers subject to prudential requirements, reporting obligations, and authorization procedures.
This regulatory update provides a list of members of the CPDI, which is relevant for firms in the banking, investment management, and wealth management sectors. The topics covered include AML/financial crime, consumer protection, and authorization/licensing, which are important for these types of firms.
This regulatory update from the CSSF covers a pre-inception readiness review for managed file transfer (MFT) services, which is relevant for investment management firms, wealth managers, and banks.
This regulatory update provides information on the global situation of undertakings for collective investment in Luxembourg, covering topics such as net asset values, fund flows, and market developments. It is informational in nature and does not appear to require immediate action, hence the 'null' urgency level.
This is a monthly statistical update on UCIs (Undertakings for Collective Investment) published by the CSSF, the financial regulator in Luxembourg. It is informational in nature and does not appear to require any immediate action, hence the low urgency level.
This regulatory update from the CSSF provides statistics on the net assets of Undertakings for Collective Investment (UCIs) in Luxembourg. It is an informational update related to reporting and disclosure requirements, as well as prudential and capital requirements, for investment management and wealth management...
This regulatory update provides a breakdown of UCIs (Undertakings for Collective Investment) registered in Luxembourg by reference currency. This information is relevant for investment management firms, wealth managers, and banks operating in the Luxembourg investment funds market.
This regulatory update from the CSSF in Luxembourg provides statistics on the origin of UCI (Undertakings for Collective Investment) initiators in the country. This information is relevant for investment management and wealth management firms operating in Luxembourg.
This regulatory update from the CSSF provides information on the number of UCIs (Undertakings for Collective Investment) in Luxembourg, which is relevant for banking, investment management, and wealth management firms operating in the country.
This regulatory update from the CSSF provides a breakdown of the investment policies and net assets of Undertakings for Collective Investment (UCIs) in Luxembourg. It is informational in nature and relevant for asset managers and wealth managers who operate UCIs.
This regulatory update from the CSSF focuses on improving financial education and empowerment, particularly for women, through a walking challenge program. It covers consumer protection, sustainability, and technology aspects relevant to banks, wealth managers, and fintechs.
This newsletter from the CSSF (Luxembourg financial regulator) covers a range of topics relevant to banking, investment management, and wealth management firms operating in Luxembourg. The low urgency reflects the informational nature of the content.
This regulatory update announces the appointment of Davy Reinard as the new Director of Resolution at the CSSF in Luxembourg. This is relevant for the banking and wealth management sectors, as the Director of Resolution oversees the resolution framework for financial institutions.
This regulatory update provides annual statistics on the development of the Luxembourg banking sector over the past decades, including key metrics such as number of banks, balance sheet totals, and net results. The information is relevant for banks, wealth managers, and the broader financial industry in Luxembourg.
This is a warning from the CSSF about fraudsters misusing the name of the CSSF Board Chair to contact supervised entities. It is relevant for banks, wealth managers, and all financial firms that may be targeted by such fraud attempts. The warning covers consumer protection, AML, and operational resilience topics.
This regulatory update provides quarterly statistics on the development of banks' balance sheet totals, which is relevant for prudential requirements, reporting, and operational resilience. It covers a range of banking and investment management firms.
This regulatory update provides quarterly statistics on employment in the banking sector, which is relevant for banks, asset managers, and wealth managers from a prudential, reporting, and operational resilience perspective.
This regulatory update provides information on the members of the Investment Fund Managers Committee, which is relevant for investment management and wealth management firms. It also touches on topics related to authorization, prudential requirements, and governance, which are important for these types of firms.
This regulatory update from the CSSF covers consumer protection and financial crime issues, which are relevant for banking, wealth management, and fintech firms. The medium urgency reflects the ongoing nature of these compliance requirements.
This is a warning from the CSSF about fraudulent activities misusing the name of JPMorgan Asset Management (Europe) S.à r.l., an investment management firm. It involves identity theft, illicit activities, and impersonation, which pose risks to consumers and the financial sector.
Latest update on the AML/CFT standardised data collection
AI Analysis
This CSSF circular letter addresses the 2026 AML/CFT standardised data collection exercise, aligning with AMLA's EU-wide initiatives by adopting AMLA-developed templates for most supervised entities while requiring specialised professionals to use CSSF-specific forms. It matters for Luxembourg financial firms as it mandates reporting on ML/TF risks and mitigation measures to support consistent EU supervision, with recent delays emphasizing preparation needs amid evolving templates.
Key dates
23 February 2026
- Planned launch for specialised professionals' CSSF questionnaire (delayed per 11 March update)
2 March 2026
- Original launch date for AMLA questionnaire and calibration exercise via eDesk platform (delayed)
13 March 2026
- AMLA webinar (10:00-12:00) on reporting framework and clarifications (connection details in CSSF annex)
15 April 2026 Deadline
- Submission deadline for AMLA calibration exercise participants (maintained despite delays; changes to be communicated)
TBD (post Deadline
11 March 2026); - New launch and submission deadlines for all data collections, pending final AMLA questionnaire
Suggested considerations
Monitor CSSF communications for final questionnaire, launch dates, and eDesk access; prepare data on 2025 ML/TF risks and mitigation using current AMLA draft (not for submission).
Selected AMLA calibration participants: Compile and submit quantitative/qualitative data via eDesk by 15 April 2026; attend 13 March webinar.
Non-selected credit/financial institutions: Complete AMLA templates on ML/TF risks/mitigation for 2025 via eDesk upon launch.
Specialised professionals: Prepare CSSF-specific questionnaire ahead of (delayed) 23 February launch.
All: Ensure resources for timely reporting; review internal AML/CFT risk assessments for consistency with EU standards.
What changed
- CSSF adopts AMLA-developed data collection templates for credit institutions, investment firms, and investment fund managers (excluding specialised professionals), replacing its prior questionnaire...
Entities selected for AMLA's mandatory calibration exercise (notified directly by CSSF) must report quantitative and qualitative ML/TF risk data; non-selected entities still report via AMLA templates...
Launch delayed from 2 March 2026 due to AMLA's consultation feedback on templates and guidance; new timelines and final questionnaire to be announced, but AMLA maintains 15 April 2026 submission for...
Specialised professionals of the financial sector complete a separate CSSF questionnaire, launching earlier on 23 February 2026 (subject to delay).
Compliance impact
Urgency: High - Mandatory reporting supports CSSF's supervisory strategy and EU AMLA calibration, with non-compliance risking enforcement; delays provide preparation time but require immediate data readiness as final deadlines approach shortly (e.g., potential April submissions). This directly feeds into entity-level ML/TF risk assessments, influencing ongoing supervision and resource allocation.
This regulatory update from the CSSF in Luxembourg relates to the public register of the audit profession, which is relevant for banking, investment management, and wealth management firms operating in Luxembourg. The key topics covered are reporting, authorization, and governance requirements.
This is a warning from the CSSF regarding a fraudulent website impersonating a Luxembourg-based bank, Sumitomo Mitsui Trust Bank (Luxembourg) S.A. This poses risks of identity theft and illicit activities, which is of high importance for banks and wealth managers to be aware of.
implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine
Why this matters
This regulation implements restrictive measures against actions undermining Ukraine's territorial integrity, which is highly relevant for financial firms operating in the region or with Ukrainian counterparties. It covers areas such as AML, prudential requirements, and reporting, making it critical for compliance.
This regulatory update from the CSSF provides monthly statistics on the balance sheet total and provisional net results of specialised PFS (Professional of the Financial Sector) firms in Luxembourg.
This regulatory update from the CSSF provides monthly statistics on the balance sheet total and provisional net results of support PFS (Professionals of the Financial Sector) in Luxembourg.
This regulatory update from the CSSF relates to disruptions on the eDesk platform, which is likely a critical operational system for financial firms. The impact could be widespread across banking, investment management, and wealth management firms, as well as fintechs that rely on the eDesk platform.
implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine
Why this matters
This Council Implementing Regulation imposes restrictive measures on actions undermining Ukraine's territorial integrity, sovereignty and independence. It is relevant for banks, wealth managers, and asset managers operating in the EU and dealing with entities/individuals subject to the sanctions.
This appears to be a calendar of SSM (Single Supervisory Mechanism) events related to Claude Wampach, which would be of interest to regulated financial firms in the banking, investment management, and wealth management sectors.
This regulatory update from the CSSF relates to a new reporting template for GBP LDI funds, which is relevant for investment managers and wealth managers that operate such funds. The update involves new disclosure and prudential requirements, hence the classification.
Delay in the 2026 AML/CFT standardised data collection
Why this matters
This interpretative note from the CSSF relates to a delay in the 2026 AML/CFT standardised data collection, which is relevant for banking, investment management and wealth management firms. It involves AML/financial crime compliance and reporting requirements, so the urgency is medium.
Delay in the 2026 AML/CFT standardised data collection
Why this matters
This regulatory update from the CSSF relates to a delay in the 2026 AML/CFT standardised data collection, which is relevant for banking, investment management, and wealth management firms. The update includes a reporting template, indicating new regulatory reporting requirements in the AML/financial crime domain.
This regulatory update provides information on the profit and loss account of credit institutions in Luxembourg as of 31 December 2025. It covers key financial metrics such as net interest margin, net commission income, and general expenses.
This regulatory update from the CSSF announces public hearings by the AMLA on draft regulatory technical standards related to AML/CFT requirements, including criteria for identifying business relationships, transactions, and customer due diligence.
Table listing the professional activities and the mandates performed
AI Analysis
This CSSF publication is an updated table (in XLSX format) listing standardized professional activities and mandates for members of the management body/governing body and conducting officers, as required under points 105 and 107 of Circular CSSF 18/698. It matters because it ensures consistent, transparent reporting of senior personnel roles in Luxembourg investment fund managers (IFMs), supporting governance, conflict-of-interest management, and CSSF supervisory oversight. Compliance professionals must use this list to standardize disclosures in authorization files and ongoing reporting.
Key dates
23 August 2018
- Publication of underlying Circular CSSF 18/698, setting baseline requirements
14 January 2019
- Original publication of the list
12 March 2026
- Latest update to the list, requiring immediate review and integration into reporting processes[Source URL]
End of May (post Deadline
financial year); - Compliance deadline for Circular 18/698 obligations, including governance reporting (e.g., 5 months after year-end)
Suggested considerations
Download and use the XLSX table: Incorporate the exact list of activities/mandates into internal templates for reporting management body and conducting officer roles[Source URL].
Update authorization and notification files: Include detailed CVs, criminal record extracts, wealth declarations, and organization charts for relevant personnel/shareholders; notify CSSF of changes (e.g., qualifying holdings, guarantees).
Conduct fit-and-proper assessments: Ensure declarations cover all listed mandates, demonstrating no conflicts and adequate resources; perform initial/ongoing due diligence on delegates.
Annual compliance review: Document roles in compliance monitoring plans, training, and reporting to senior management/CSSF; align with delegate oversight (e.g., risk-based monitoring of compliance, audit functions).
Policy updates: Revise governance policies to reflect the updated list, including AML/CFT officer designations and own funds proofs.
What changed
The document was originally published on 14 January 2019 and updated on 12 March 2026, reflecting revisions to the predefined list of professional activities and mandates[Source URL].
Alignment with Circular CSSF 18/698 requirements for IFMs (management companies for UCIs and AIFs), specifying reportable roles like those in collective portfolio management, risk management,...
Emphasis on detailed documentation of mandates to demonstrate fitness, properness, and avoidance of conflicts, including for shareholders with qualifying holdings.
No entirely new requirements introduced, but the update likely incorporates evolving governance expectations, such as enhanced delegate oversight and AML/CFT compliance officer designations.
Compliance impact
Urgency: High – The March 12, 2026 update coincides with today's date, demanding immediate review to avoid supervisory findings during CSSF inspections or authorization processes. Non-compliance risks authorization delays, fines, or reputational damage, as Circular 18/698 emphasizes robust governance in a heightened scrutiny environment for IFMs (e.g., delegate oversight, AML).
This regulatory update provides information on the global situation of undertakings for collective investment in Luxembourg at the end of January 2026. It covers topics related to investment management, reporting, and licensing, which are relevant for asset managers and wealth managers.
Delay in the 2026 AML/CFT standardised data collection
AI Analysis
The CSSF circular letter dated 11 March 2026 announces a delay in its planned AML/CFT standardised data collection exercise originally scheduled for 2026, primarily due to overlap with a concurrent broad-scope data collection by the European Anti-Money Laundering Authority (AMLA). This matters for compliance professionals as it reduces immediate reporting burdens on supervised entities, promotes regulatory simplification, and aligns Luxembourg practices with emerging EU AML/CFT methodologies, allowing firms to redirect resources to the mandatory AMLA exercise.
Key dates
TBD 2026
Potential ad-hoc CSSF questionnaires for essential data points
23 February 2026
Original launch for specialised professionals' CSSF questionnaire
2 March 2026
Original launch date for AMLA calibration exercise data collection via eDesk (now potentially adjusted or paused per delay circular)
11 March 2026
Publication of delay circular, superseding prior timelines; further modalities to be communicated
15 April 2026 Deadline
Original reporting deadline to CSSF for AMLA calibration exercise data
Suggested considerations
Monitor CSSF updates: Await forthcoming communications on revised modalities, new timelines, and any ad-hoc requests via eDesk platform.
Prioritize AMLA obligations: Selected entities must prepare quantitative/qualitative ML/TF risk data per draft RTS on risk assessments (Article 40(2) of Directive (EU) 2024/1640); non-selected entities focus on AMLA templates for 2025 risks/mitigation.
Specialised professionals: Continue preparations for CSSF-specific questionnaire, confirming any shifts post-delay.
Internal review: Assess ML/TF risk profiles, mitigation measures, and reporting readiness in light of EU alignment; update compliance calendars to reflect simplification.
No immediate submissions: Stand down from original 2 March/15 April deadlines unless individually notified otherwise.
What changed
- Postponement of CSSF-specific questionnaire: The CSSF has decided not to proceed with its own AML/CFT standardised data collection for most supervised entities (credit institutions, investment...
Exception for specialised professionals: Specialised professionals of the financial sector (e.g., certain non-credit institutions) remain subject to a CSSF-specific questionnaire, though timelines...
Rationale tied to AMLA calibration exercise: Entities selected for AMLA's 2026 calibration exercise (notified directly by CSSF) must complete it regardless; non-selected entities were to use AMLA...
Potential for ad-hoc requests: CSSF reserves the right to issue targeted questionnaires later in 2026 for essential data points not covered by AMLA.
These changes supersede the 12 February 2026...
Compliance impact
Urgency: Medium. The delay alleviates short-term pressure by postponing submissions and reducing dual reporting, enabling resource reallocation to higher-priority AMLA efforts amid EU harmonization. It matters for maintaining a risk-based approach (RBA) under FATF standards, avoiding overburden from overlapping exercises, and preparing for the new EU AML/CFT methodology—non-compliance risks supervisory scrutiny, but the simplification lowers immediate enforcement exposure.
This is a monthly statistical update on UCIs (Undertakings for Collective Investment) published by the CSSF, the financial regulator in Luxembourg. It is informational in nature and does not appear to require any immediate action, hence the low urgency level.
This regulatory update from the CSSF provides statistics on the net assets of UCIs (Undertakings for Collective Investment) as of January 2026. This information is relevant for investment management and wealth management firms that operate or invest in UCIs.
This regulatory update provides a breakdown of UCIs (Undertakings for Collective Investment) registered in Luxembourg by reference currency. It is informational in nature, covering statistics and data related to the investment management industry, banking, and wealth management firms operating in Luxembourg.
This regulatory update from the CSSF provides statistics on the origin of UCI (Undertakings for Collective Investment) initiators in Luxembourg. This is relevant for investment management and wealth management firms operating in Luxembourg, as it provides insights into the market composition.
This regulatory update from the CSSF provides information on the number of UCIs (Undertakings for Collective Investment) in Luxembourg, which is relevant for banking, investment management, and wealth management firms operating in the country.
This regulatory update from the CSSF provides information on the investment policy breakdown of Undertakings for Collective Investment (UCIs) in Luxembourg. It is relevant for investment management firms, banks, and wealth managers that operate or invest in Luxembourg-domiciled funds.
This is a warning from the CSSF regarding fraudulent websites impersonating a regulated investment firm, which poses risks of identity theft and illicit activities. It is a high-urgency issue for banks, wealth managers, and fintechs that may be targeted or impersonated by such scams.
This warning concerns a fraudulent website impersonating a legitimate investment firm, which poses risks of identity theft and illicit activities. It is relevant to banking, investment management, and wealth management firms, as well as fintechs, and requires prompt attention due to the potential for consumer harm.
This regulatory update announces the results of the 2025 professional competence examination for statutory auditors ('réviseurs d'entreprises') in Luxembourg. It is an informational update relevant for banks, wealth managers, and all firms subject to statutory audits in Luxembourg.
Administrative sanction imposed on an investment firm
AI Analysis
The CSSF imposed an administrative sanction on 8 October 2025 against an unnamed investment firm, as detailed in a publication released on 4 March 2026. This enforcement action underscores CSSF's rigorous oversight of investment firms, particularly in areas like AML/CFT compliance, conduct rules, and organizational requirements, serving as a warning for similar entities to strengthen cooperation and internal controls. It matters because it highlights escalating fines for repeated or material breaches, potentially influencing supervisory expectations across Luxembourg's financial sector.
Key dates
10 January 2025
- Date of prior depositary oversight fine
4 April 2025 Deadline
- Deadline for submitting CSSF AML/CFT Questionnaire (breach example from similar case)
16 July 2025
- Date of fine imposition for UCITS investment policy breaches
11 September 2025
- Date of fine imposition in comparable AIFM non-cooperation case
8 October 2025
- Date of the sanction in question
Suggested considerations
Enhance cooperation protocols: Implement automated tracking for CSSF requests (e.g., questionnaires) with escalations for reminders; document all responses.
Review investment compliance: Audit broker exposures, valuation processes, and subscription/redemption controls against UCI Law Articles 41-43, 109; suspend dealings if uncertainties arise.
Strengthen governance: Conduct gap analyses on internal controls, risk assessments, and reporting for depositary/oversight functions per AIFM Law Article 19(9) and CDR 231/2013.
Training and monitoring: Roll out firm-wide training on AML/CFT obligations (Article 5(1)) and perform reconciliations of assets/records; prepare for on-site/off-site CSSF inspections.
Self-reporting: Proactively disclose prior breaches to mitigate fine severity.
What changed
No new regulatory changes or requirements are introduced; this is an enforcement action applying existing rules.
Failure to cooperate with CSSF requests, e.g., not submitting required AML/CFT questionnaires by deadlines, violating Article 5(1) of the amended Law of 12 November 2004 on AML/CFT.
Non-compliance with investment policies, organizational requirements, or conduct rules under the UCI Law (e.g., Articles 41, 43, 109), including improper broker exposures or valuation failures.
These reflect ongoing enforcement of established frameworks like the AIFM Law, UCI Law, and AML/CFT Law, with fines calibrated by factors like breach duration, firm size, cooperation level, and prior...
Compliance impact
Urgency: High - This matters due to CSSF's pattern of publicizing nominative sanctions (e.g., Max Gain Capital, Zeus Asset Management), signaling increased scrutiny on investment firms amid AML/CFT and conduct risks. Fines (EUR 10,000–127,500) represent material hits (up to 10% of turnover), with factors like poor cooperation amplifying penalties; firms with similar exposures face elevated inspection risk, especially post-2025 enforcement wave.
implementing Regulation (EU) No 208/2014 concerning restrictive measures directed against certain persons, entities and bodies in view of the situation in Ukraine
Why this matters
This regulation implements restrictive measures against certain persons, entities and bodies in view of the situation in Ukraine. It is relevant for banking, investment management and wealth management firms that may be impacted by sanctions or need to comply with reporting requirements.
implementing Article 8a of Regulation (EC) No 765/2006 concerning restrictive measures in view of the situation in Belarus and the involvement of Belarus in the Russian aggression against Ukraine
Why this matters
This regulation implements restrictive measures against Belarus in view of its involvement in the Russian aggression against Ukraine. It is likely to have a high impact on banks, wealth managers, and asset managers that have exposure to Belarus or are required to comply with the sanctions.
This regulatory update identifies reporting requirements and completeness checks, which is relevant for banks, asset managers, and wealth managers from a prudential, operational resilience, and disclosure perspective.
This regulatory update from the CSSF focuses on its supervisory priorities in the area of sustainable finance, covering transparency and disclosures, risk management and governance, and MiFID rules related to sustainability for credit institutions and investment firms, as well as priorities for the asset management...
This directive establishes a public register of the audit profession in the EU, which is relevant for banking, investment management, and wealth management firms that are subject to audit requirements. The topics covered include AML/financial crime, consumer protection, and reporting/disclosure obligations.
amending Directives 2006/43/EC, 2013/34/EU, (EU) 2022/2464 and (EU) 2024/1760 as regards certain corporate sustainability reporting requirements and certain corporate sustainability due diligence requirements
Why this matters
This directive amends several existing EU directives related to corporate sustainability reporting and due diligence requirements. It will have a significant impact on financial firms in the banking, investment management, and wealth management sectors, requiring changes to their reporting and compliance processes.
This is a warning from the CSSF about fraudulent activities carried out by an unauthorized entity called Aisbierg Ennerstetzung Bank, which is posing as a financial services provider.
This is a warning from the CSSF about fraudulent activities by persons misusing the name of MERITUM CAPITAL, a Luxembourg-based investment management firm. The warning covers identity theft, illicit activities, and the use of unauthorized websites and email addresses.
This warning concerns a fraudulent website impersonating a legitimate investment firm, which poses risks of identity theft and illicit activities. It is a high-priority issue for banks, wealth managers, and fintechs that may be targeted or impacted by this scam.
This warning concerns a fraudulent website impersonating a legitimate investment management firm, which poses risks of identity theft and illicit activities. It is a high-urgency issue for firms in the banking, investment management, and wealth management sectors that need to be aware of this scam and take appropriate...
implementing Regulation (EU) 2024/1485 concerning restrictive measures in view of the situation in Russia
Why this matters
This regulation implements further restrictive measures against Russia, which will impact financial firms across banking, investment management, and wealth management sectors. The topics covered include AML/financial crime, prudential requirements, and reporting obligations, which are critical for firms to comply with.
This regulatory update from the CSSF in Luxembourg is relevant for banks and wealth managers that are involved in the issuance of covered bonds ('lettres de gage').
This regulatory update provides an overview of the global situation of undertakings for collective investment in Luxembourg at the end of December 2025. It covers topics related to investment management, wealth management, prudential requirements, and reporting, which are relevant for asset managers, banks, and wealth...
This warning from the CSSF relates to potential illicit activities associated with the website www.qatari.xyz, which is not authorized to provide investment or financial services in Luxembourg. This is a high-urgency issue for banks, wealth managers, and fintechs that may be impacted by this unauthorized entity.
This newsletter from the CSSF (Luxembourg financial regulator) covers a range of topics relevant to banking, investment management, and wealth management firms operating in Luxembourg. The low urgency reflects that this is an informational update rather than a critical regulatory change.
This regulatory update appears to be a calendar of events related to the Single Supervisory Mechanism (SSM) and Claude Wampach. It covers a range of topics relevant to banking, investment management, and wealth management firms, including prudential requirements, reporting, and governance.
This CSSF FAQ (Version 23, updated 17 February 2026) provides interpretive guidance on the Luxembourg Law of 17 December 2010 relating to undertakings for collective investment (UCIs), covering UCITS, Part II UCIs, SIFs, and SICARs. It matters for compliance professionals as it clarifies authorisation processes, investment rules, and supervisory expectations, ensuring alignment with evolving EU frameworks like AIFMD and MiCAR. The update, effective today, addresses recent regulatory shifts including crypto-asset integration.
Key dates
20 May 2025
Related AIFM FAQ Version 24; Introduces changes relevant to UCI managers acting as AIFMs
16 January 2026
UCI Authorisation page update; Reflects ongoing CSSF expectations for approvals
04 February 2026
Crypto FAQ Version 7 update effective; MiCAR-aligned changes on crypto exposure, authorisation extensions, and depositary notifications
17 February 2026 Deadline
FAQ Version 23 update effective; Applies immediately to UCI operations, authorisations, and compliance.[User-provided content]
Suggested considerations
Review and Update Documents: Align UCI constitutive documents, investment policies, and sales documents with clarified rules on strategies, LMTs, conflicts, and risk-spreading; apply look-through for intermediaries.
Crypto-Specific: For >10% NAV exposure, apply for "Other-Other Fund-Crypto-assets" extension (custody, valuation, AML/CFT plans, expertise); notify CSSF for depositary crypto custody; implement heightened AML/CFT due diligence per FATF/Luxembourg assessments.
Authorisation/Amendments: Submit for CSSF approval on new setups, manager changes, or sub-funds (esp. SICAV multi-sub-funds with EU cross-border services).
Governance and Reporting: Ensure RC/RR demonstrate crypto risk understanding; update disclosures for investors on risks, LMTs, and fair treatment.
Ongoing Compliance: Use FAQ/Compilation for RAIFs/SIFs/SICARs/Part II UCIs; auditors/managers confirm tax-exempt status for SICARs.
What changed
- Authorisation Requirements: UCIs require CSSF approval of constitutive documents (articles, management regulations), depositary selection, and management company/AIFM applications for contractual...
Crypto-Asset Updates (aligned with separate but related FAQ Version 7): Replaces "virtual assets" with "crypto-assets" per MiCAR (EU 2023/1114); UCITS and retail AIFs (non-well-informed investors)...
Investment Policies and Liquidity Management: Funds must detail objectives, strategies, asset classes, restrictions, borrowing, and conflicts; look-through for intermediary vehicles per ESMA/AIFMD...
Risk Spreading Exemptions: Limits do not apply to OECD/EU-guaranteed securities or UCIs with comparable risk-spreading.
Depositary Role in Crypto: Luxembourg depositaries can custody crypto-assets with safeguards and CSSF notification; responsibility varies by model (depositary or MiCAR provider).
Compliance impact
Urgency: High – The update coincides with MiCAR implementation and today's release, requiring immediate review for crypto-exposed funds to avoid unauthorised strategies or AML gaps; non-compliance risks supervisory actions, authorisation delays, or investor disputes in Luxembourg's key fund domicile.
This regulatory update from the CSSF relates to the notification requirements under Article 33 of the AIFMD, which is relevant for investment managers and wealth managers. It covers AML/financial crime compliance as well as authorization and licensing, which are critical topics for these firms.
This warning concerns fraudulent activities by an unauthorized entity, Minea Global Finance SA, which is not supervised by the CSSF and has not been granted any authorization to provide investment or financial services in Luxembourg. This poses a high risk to consumers and the financial system.
This is a monthly statistical update on UCIs (Undertakings for Collective Investment) published by the CSSF, the financial regulator in Luxembourg. It is informational in nature and covers reporting and disclosure requirements as well as prudential/capital aspects relevant for investment managers and wealth managers.
This regulatory update from the CSSF provides monthly statistics on the net assets of Undertakings for Collective Investment (UCIs), which are investment funds. This information is relevant for investment management firms, banks, and wealth managers that operate or invest in these types of funds.
This regulatory update provides a breakdown of UCIs (Undertakings for Collective Investment) registered in Luxembourg by reference currency. It is an informational update for investment management firms, banks, and wealth managers that operate in the Luxembourg market.
This regulatory update from the CSSF provides statistics on the origin of UCI (Undertakings for Collective Investment) initiators in Luxembourg. This is relevant for investment management and wealth management firms operating in Luxembourg, as it provides insights into the market composition.
This regulatory update from the CSSF provides annual statistics on the development of net assets and number of UCIs (Undertakings for Collective Investment) in Luxembourg. It is an informational update relevant for investment management and wealth management firms operating in Luxembourg.
This regulatory update from the CSSF provides information on the number of UCIs (Undertakings for Collective Investment) as of 31 December 2025. It is an informational update related to the banking and investment management sectors, covering topics such as prudential requirements, reporting, and licensing.
This regulatory update provides a breakdown of the investment policies and net assets of Undertakings for Collective Investment (UCIs) as of 31 December 2025. It is informational in nature and relevant for asset managers and wealth managers who invest in or advise on UCIs.
This regulatory update provides a list of investment funds (UCIs and SIFs) that have a sharia-compliant policy, which is relevant for investment management and wealth management firms.
This regulatory update relates to net assets of Undertakings for Collective Investment (UCIs) according to the Sustainable Finance Disclosure Regulation (SFDR). It is informational in nature and relevant for investment management and wealth management firms that are subject to SFDR reporting requirements.
Submission of the register of information at individual or consolidated level to the CSSF (excluding entities under the direct supervision of the ECB)
Why this matters
This regulatory update from the CSSF provides details on the submission timeframe and process for the DORA register of information, which is relevant for banking, investment management, and wealth management firms. It covers operational resilience, reporting, and technology/cyber topics.
The regulatory update describes active exploitation of vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM), a mobile endpoint management solution. This poses a severe risk to managed devices and sensitive data, especially for financial firms that use EPMM.
This regulatory update from the CSSF provides monthly statistics on the balance sheet total and provisional net results of specialised PFS (Professionals of the Financial Sector) in Luxembourg.
This regulatory update provides quarterly employment statistics for specialized professional financial services (PFS) firms in Luxembourg. It covers employment trends across different sectors and is likely of interest to firms operating in the banking, investment management, and wealth management industries.
This regulatory update from the CSSF provides monthly statistics on the balance sheet total and provisional net results of support PFS (Professionals of the Financial Sector) in Luxembourg.
This regulatory update provides quarterly employment statistics for support PFS firms, which is informational in nature and does not indicate any urgent regulatory changes or actions.
This regulatory update provides annual statistics on the balance sheet total and net result of support PFS firms in Luxembourg. It is informational in nature and does not appear to require immediate action, hence the low urgency level.
This warning concerns a fraudulent website impersonating a legitimate financial services firm, which poses risks of identity theft and illicit activities. It is relevant for banks, wealth managers, and fintechs that may be targeted or impersonated in such scams.
This regulatory update is related to the list of fund units subject to the European Social Entrepreneurship Funds (EuSEF) regulation, which is relevant for investment management and wealth management firms that offer or invest in such funds.
This regulatory update provides a list of fund units subject to the European Long-Term Investment Funds (ELTIFs) regulation, which is relevant for investment management and wealth management firms that offer or manage such funds.
This is an update to a regulatory form related to the notification and change of particulars for tied agents, which is relevant for investment management and wealth management firms.
This regulatory update announces the reappointment of the Director General of the CSSF, the financial regulator in Luxembourg. It is relevant for banks and wealth managers operating in Luxembourg as it signals continuity in the leadership and oversight of the regulator.
This regulatory update warns about online financial frauds and scams in an artificial intelligence world, which is highly relevant for banking, investment management, and wealth management firms, as well as fintechs and crypto exchanges that operate in the digital finance space.
This is a warning from the CSSF regarding an unauthorized entity, Castleforbes Wealth Limited, that is allegedly providing investment services without proper authorization in Luxembourg.
Administrative sanction imposed on Genève Invest (Europe) S.A.
AI Analysis
The CSSF imposed an administrative sanction on 23 July 2025 against Genève Invest (Europe) S.A., a Luxembourg-regulated entity, for breaches of professional obligations, as detailed in a publication released on 4 February 2026. This enforcement action underscores the CSSF's focus on robust internal controls and compliance with investment rules, serving as a warning to investment firms on the consequences of organizational and conduct failures. Compliance professionals should note it as evidence of heightened CSSF scrutiny on fund managers handling client assets and counterparties.
Key dates
23 July 2025
- Date of administrative sanction imposition on Genève Invest (Europe) S.A
4 February 2026
- Publication date of the sanction document by CSSF
Suggested considerations
Immediate review of counterparty due diligence: Verify licenses and financial stability of brokers/prime brokers; cease deposits with unauthorized or suspended entities per UCI Law Article 41.
Enhance valuation and accounting controls: Ensure assets (e.g., cash deposits) are valued at probable realization value per Article 28(4) UCI Law and prospectus terms; implement automated monitoring for ongoing compliance.
Conduct internal audits: Assess organizational requirements, investment policies, and conduct rules (CSSF Regulation 10-04); remediate gaps proactively, as seen in mitigated sanctions for cooperative firms.
Update governance and reporting: Document risk assessments and report prior breaches to CSSF to demonstrate cooperation, potentially reducing fine severity.
What changed
This is not a regulatory change or new requirement but an enforcement action highlighting existing obligations under Luxembourg law. Key breaches likely mirror patterns in recent CSSF sanctions, such as non-compliance with UCI Law provisions on investment policies (e.g., Articles 41, 43), sound accounting procedures (Article 109), and rules of conduct (Articles 111, CSSF Regulation 10-04), including improper cash deposits with unauthorized brokers and inaccurate asset valuation.
Compliance impact
Urgency: High – This sanction, published today (4 February 2026), signals ongoing CSSF off-site and on-site probes into fund operations, similar to fines imposed in July 2025 on Zeus Asset Management (€18,136 for UCI breaches) and a bank (reprimand for AML gaps). It matters due to escalating enforcement—fines calibrated to turnover (e.g., 10% in Zeus case)—and risks of reputational damage, especially for wealth managers with broker exposures. Non-compliance could trigger investigations, as CSSF considers infringement duration, cooperation, and history.
This regulatory update provides information on a registration form for meetings with UCI Departments of the CSSF, which is relevant for financial firms in the banking, investment management, and wealth management sectors.
This regulatory update relates to the Luxembourg Law on alternative investment fund managers, which is relevant for investment management and wealth management firms operating in Luxembourg.
implementing Regulation (EU) 2024/2642 concerning restrictive measures in view of Russia’s destabilising activities
Why this matters
This regulation implements sanctions against Russia, which will impact banking, investment management, and wealth management firms that have exposure to Russia. Firms will need to comply with the new sanctions requirements, including reporting and disclosure obligations.
This regulatory update from the CSSF provides information on the processing times for initial authorisations of regulated investment vehicles, including UCITS funds, SIFs, and PIILs. This is relevant for asset managers and wealth managers seeking to obtain authorisation for new investment funds.
implementing Regulation (EU) 2024/2642 concerning restrictive measures in view of Russia’s destabilising activities
Why this matters
This regulation implements further restrictive measures against Russia, which will impact financial institutions across banking, investment management, and wealth management sectors.
This regulatory update from the CSSF introduces a new dedicated data entry form for investment firms to update their information, including changes to entity details, services, management, shareholders, and other key functions.
This is a warning about fraudulent activities misusing the name of a specific investment fund, which is relevant for investment managers and wealth managers who need to be aware of such scams to protect their clients.
This is an informational update on the members of the Consultative Committee for Prudential Regulation, which is relevant for banks, asset managers, and wealth managers from a prudential, operational resilience, and authorization perspective.
This regulatory update announces the updated list of members of the Consultative Committee for the Audit Profession, which is relevant for banking, investment management, and wealth management firms that are subject to audit requirements.
This regulatory update provides information on the list of members of the Board, which is relevant for banking, investment management, and wealth management firms that are subject to oversight by the CSSF.
This regulatory update provides information on the updated list of members of the Executive Board, which is relevant for banking, investment management, and wealth management firms that operate in Luxembourg and are subject to CSSF oversight.
This regulatory update from the CSSF (Luxembourg financial regulator) provides information about the public register of the audit profession, which is relevant for banking, investment management, and wealth management firms operating in Luxembourg.
This newsletter from the CSSF (Luxembourg financial regulator) covers a range of topics relevant to banking, investment management, and wealth management firms operating in Luxembourg. The low urgency reflects that this is an informational publication rather than a time-sensitive regulatory update.
This regulatory update is focused on the money laundering and terrorist financing risks associated with trust and company service provider (TCSP) activities within the financial sector in Luxembourg. It requires firms providing these services to integrate the findings and recommendations into their AML/CFT frameworks.
This regulatory update relates to resolution reporting requirements, which is relevant for banking, investment management, and wealth management firms. The topics covered include reporting and disclosure, prudential/capital requirements, and operational resilience.
This regulatory update from the CSSF focuses on the ML/FT risk assessment of specialized professionals in the financial sector providing corporate services, such as trust and company service providers. This is relevant for banks, wealth managers, and family offices that may offer these types of services.
This regulatory update on resolution reporting requirements is relevant for banking, investment management, and wealth management firms. It covers prudential and capital requirements, reporting and disclosure obligations, as well as operational resilience considerations.
This regulatory update from the CSSF deactivates certain validation rules and EBA small validation packages for COFREP reporting, which is relevant for banks, asset managers, and wealth managers in the banking and investment management sectors. The update is informational in nature, so the urgency is low.
relating to the fees to be levied by the Commission de Surveillance du Secteur Financier
Why this matters
This regulatory update relates to the fees levied by the Luxembourg financial regulator CSSF, which is relevant for banks, asset managers, and wealth managers operating in the Luxembourg financial sector.
amending Council Regulation (EU) No 833/2014 concerning restrictive measures in view of Russia’s actions destabilising the situation in Ukraine
Why this matters
This regulation amends existing sanctions against Russia related to the Ukraine conflict, which will impact financial firms across banking, investment management, and wealth management sectors. The changes require firms to update their compliance programs, reporting, and capital requirements.
This appears to be an informational update from the CSSF regarding the SSM Calendar Claude Wampach, which is likely relevant for banks, wealth managers, and asset managers operating in the banking and investment management sectors.
Circular CSSF 19/708 mandates the electronic transmission of specified documents to the CSSF via secure platforms like e-file or SOFiE, effective from February 1, 2019, replacing prior paper or other methods. This updated annex (as amended by Circular CSSF 21/790 and further revisions up to April 1, 2025) standardizes submissions for investment funds and related entities, reducing administrative burdens while ensuring document integrity and CSSF accessibility. Compliance professionals must monitor the dynamic annex list on the CSSF website to avoid nullified submissions.
Key dates
28 January 2019
Publication date; of original Circular CSSF 19/708
1 February 2019
Entry into force; Mandatory electronic transmission for listed documents; non-electronic submissions null and void
22 December 2021
Amendment; by Circular CSSF 21/790
1 April 2025
Latest annex update; noted
Ongoing Deadline
Regular checks required; Entities must monitor CSSF website for annex updates
Suggested considerations
Register/access e-file or SOFiE platforms if not already (test/production environments available since February 2019).
Consult and adhere to the latest Annex I for document list, nomenclatures, and formats (PDF with full functionality).
Ensure submissions are final/official versions matching hard copies; use specified identifiers for UCIs/SIFs/SICARs.
Implement processes for automatic/manual transmission (e.g., via updated sending services v4.9.0 or transmission module 6.6.0).
Train staff on responsibilities and integrate into reporting workflows; reference CSSF FAQs for closing documents.
What changed
- Mandatory Electronic-Only Submission: Documents listed in Annex I must be transmitted exclusively via e-file (http://www.e-file.lu) or SOFiE...
Dynamic Annex Updates: The annex, published on the CSSF website, is regularly updated (e.g., latest noted April 1, 2025) and includes prospectuses, management regulations, annual reports, risk...
Scope Expansion: Extends beyond UCIs to securitisation undertakings (2004 Law), pension funds (2005 Law), SICARs, and Luxembourg IFMs; repeals prior Circulars CSSF 09/423 and 08/371.
Filer Responsibilities: Entities ensure documents match official final hard copies, handle content/format accuracy, and check annex updates regularly.
Compliance impact
Urgency: Low (for new implementations post-2019; medium for ongoing monitoring). This matters for operational efficiency and CSSF relations, as non-compliance risks rejected filings, delays (e.g., approvals under SFDR processes), or supervisory scrutiny, but long-standing rule (since 2019) with established platforms reduces immediate pressure. Firms must prioritize annex vigilance to avoid disruptions in routine reporting like annual reports or prospectuses.
amending Delegated Regulation (EU) 2016/1675 to add Russia to the list of high-risk third countries with strategic deficiencies
Why this matters
This regulation amends the list of high-risk third countries, which has implications for AML/CFT compliance, prudential requirements, and authorization/licensing for firms operating in the banking, investment management, and wealth management sectors.
This regulatory update from the CSSF provides guidance for 'finfluencers' on responsible promotion, which is relevant for investment management firms, wealth managers, banks, and fintechs that engage in digital marketing and social media activities.
Long Form Report – Practical rules concerning the self-assessment questionnaire to be submitted by investment firms – Mission and related reports of the réviseurs d’entreprises agréés (approved statutory auditors)
This press release provides an update on the global situation of undertakings for collective investment at the end of November 2025, which is relevant for investment management and wealth management firms.
Extract from the CSSF Newsletter No 300 – January 2026
Why this matters
This regulatory update from the CSSF provides monthly statistics and main figures regarding the Luxembourg financial centre, which is relevant for banking, investment management, and wealth management firms operating in the jurisdiction.
Update of Circular CSSF 24/850 on the practical rules concerning the descriptive report and the self-assessment questionnaire to be submitted on an annual basis by support PFS, as well as the engagement of the réviseurs d’entreprises agréés (approved statutory auditors) of support PFS and practical rules concerning…
AI Analysis
Circular CSSF 25/903 updates Circular CSSF 24/850, refining practical rules for support Professional of the Financial Sector (support PFS) in Luxembourg regarding their annual descriptive report, self-assessment questionnaire, and the roles of approved statutory auditors (réviseurs d’entreprises agréés). It specifies requirements for auditors' engagement, management letters, and separate annual reports. This matters for support PFS as it enhances supervisory oversight, ensures consistent reporting quality, and strengthens internal controls, directly impacting compliance and audit processes amid CSSF's focus on robust PFS supervision.
Key dates
30 April (annually) Deadline
Submission Deadline; Support PFS must submit descriptive report, self-assessment questionnaire, management letter, and separate auditor report to CSSF by 30 April following the financial year-end (first applicable: 30 April 2026 for FY 2025)
31 December 2025 Deadline
Preparation Milestone; Auditors must be engaged and initial scoping completed by year-end 2025 for FY 2025 compliance
1 January 2026
Effective Date; Applies to annual reporting cycles starting for financial year 2025 onwards
Suggested considerations
*Review and Update Processes: Support PFS must map current reporting against new templates in CSSF 25/903 and revise internal procedures for descriptive reports and self-assessments.
*Engage/Confirm Auditors: Select or confirm approved statutory auditors compliant with new engagement rules; execute updated engagement letters incorporating circular requirements by Q4 2025.
*Implement Templates and Testing: Adopt CSSF-provided templates for reports, management letters, and separate reports; conduct sample-based testing of controls as specified.
*Training and Governance: Train compliance/audit teams on changes; ensure board approval of self-assessments and auditor findings.
*Submit on Time: Prepare and file all documents by 30 April deadlines, retaining evidence for CSSF inspections.
What changed
- Updates to Descriptive Report and Self-Assessment Questionnaire: Refines content, format, and submission requirements for support PFS's annual submissions, emphasizing more detailed disclosures on...
Auditor Engagement Rules: Introduces specific practical guidelines for approved statutory auditors, including mandatory scope of work, independence confirmations, and standardized procedures for...
Management Letter and Separate Report: Establishes detailed rules for auditors to issue an annual management letter (addressing findings, recommendations, and remediation) and a separate report for...
Enhanced Documentation and Evidence: Requires support PFS and auditors to provide verifiable evidence (e.g., checklists, testing samples) supporting self-assessments, with stricter CSSF validation...
Compliance impact
Urgency: High. This is high urgency for support PFS due to the impending 30 April 2026 deadline for FY 2025 submissions, with non-compliance risking supervisory fines, license reviews, or reputational damage under CSSF's PFS enforcement regime. It matters as it tightens audit accountability, potentially increasing costs (e.g., auditor fees) while reducing reporting errors—critical for smaller support entities with limited resources.
Practical rules concerning the descriptive report and the self-assessment questionnaire to be submitted on an annual basis by support PFS.Engagement of the réviseurs d’entreprises agréés (approved statutory auditors) of support PFS and practical rules concerning the management letter and the separate report to be…
AI Analysis
Circular CSSF 24/850, as amended by Circular CSSF 25/903, establishes practical rules for support Professional of the Financial Sector (support PFS) in Luxembourg to submit annual descriptive reports and self-assessment questionnaires, while also defining the roles of approved statutory auditors (réviseurs d’entreprises agréés) in issuing management letters and separate reports. This guidance standardizes supervisory reporting and audit processes to enhance oversight of support PFS, which provide essential back-office services to authorized PFS. It matters because non-compliance risks supervisory sanctions, reputational damage, and operational disruptions for entities reliant on support PFS structures.
Key dates
1 January 2025
- Effective date of original Circular CSSF 24/850
15 December 2025
- Effective date of amendments in Circular CSSF 25/903, applicable to 2025 reporting cycle onwards
31 March annually Deadline
- Deadline for submission of descriptive report, self-assessment questionnaire, management letter, and separate auditor report to CSSF (first applicable for FY 2024 reporting due 31 March 2025)
End of February annually Deadline
- Support PFS must engage auditors and provide necessary data to enable timely report preparation
Suggested considerations
Annual Reporting Cycle:
1. By year-end, conduct internal self-assessment using the prescribed questionnaire template (available via CSSF portal).
February to review submissions, test controls, and issue management letter (flagging deficiencies) plus separate compliance report.
Governance Updates: Review and update internal policies on risk assessment, auditor selection, and remediation of management letter findings; ensure board oversight of submissions.
Auditor Coordination: Verify auditor qualifications per CSSF register; implement any remediation plans from prior-year management letters before next cycle.
Record-Keeping: Maintain 5-year audit trail of all supporting documentation for CSSF inspections.
What changed
- Standardized Reporting Templates: Introduces detailed formats and content requirements for the annual descriptive report and self-assessment questionnaire, covering governance, risk management,...
Auditor Engagement Rules: Mandates approved statutory auditors to perform specific procedures, issue a management letter highlighting control weaknesses, and prepare a separate report confirming...
Amendments via CSSF 25/903: Updates clarify submission procedures, expand self-assessment criteria (e.g., adding cybersecurity and outsourcing risk questions), and refine auditor independence...
Frequency and Scope: Annual submissions required without exceptions; scope limited to support PFS (not primary PFS), emphasizing substance over form in service descriptions.
Compliance impact
Urgency: High – This is a recurring annual obligation with a firm 31 March deadline, where delays trigger automatic CSSF notifications and potential fines (up to €250,000 per Law 1993). It matters for support PFS as it intensifies scrutiny on operational resilience in a post-SFI (2021) landscape, where CSSF prioritizes substance in delegated functions; failure risks de-authorization or client outflows. Early implementation of templates and auditor pipelines is essential to avoid first-year pitfalls.
Press release 25/21(published on 22 December 2025, updated on 31 December 2025)
Why this matters
This regulatory update is about the dissolution and judicial liquidation of ALFA ASSET MANAGEMENT (EUROPE) S.A., an investment management and wealth management firm. It involves topics related to authorization and licensing as well as prudential and capital requirements.
This regulatory update relates to the profit and loss account of credit institutions, which is relevant for banking and investment management firms. The topics of prudential/capital requirements and reporting/disclosure are also applicable. The update is informational in nature, so the urgency is low.
Revision and remodelling of the rules to which Luxembourg undertakings governed by the Law of 30 March 1988 on undertakings for collective investment (“UCI”) are subject
AI Analysis
Circular IML 91/75, as amended up to CSSF Circular 25/901, consolidates and modernizes the supervisory framework for Luxembourg Part II UCIs, SIFs, and SICARs, refining rules on diversification, borrowing, risk-spreading, and disclosures while tailoring requirements to investor profiles. It matters because it streamlines fragmented regulations, enhances fund competitiveness, and formalizes CSSF expectations without mandating immediate changes for pre-existing funds, reducing compliance burdens while promoting transparency and flexibility. This update aligns administrative practices with market realities, repealing outdated circulars to eliminate ambiguity.
Suggested considerations
Review and update offering documents/prospectuses for enhanced transparency on risks, limits, borrowing, liquidity tools (e.g., gates, notice periods), redemption processes, and investor-specific warnings.
Align fund documentation/terminology with CSSF Compilation of key concepts for consistency in filings and communications.
Disclose ramp-up/wind-down periods, potential derogations, and life extensions clearly; seek CSSF approval for exemptions where justified.
For SICARs: Ensure risk capital investments meet modernized criteria; apply look-through for limits.
Assess portfolio compliance for new funds/compartments; leverage flexibility for sophisticated investors but maintain robust governance.
What changed
- Consolidation and Repeals: Repeals CSSF Circulars 02/80, 07/309, 06/241, and Chapters G and I of IML 91/75; renders CSSF 08/356 and Chapter H of IML 91/75 inapplicable to Part II UCIs.
Flexible Diversification Rules: Introduces investor-category-based thresholds (e.g., stricter for retail, looser for sophisticated investors); allows CSSF derogations for SIFs/Part II UCIs with...
Borrowing Limits: New limits for SIFs/Part II UCIs (e.g., 70% of net assets, excluding temporary borrowings tied to commitments); tailored by investor type.
Enhanced Disclosures: Offering documents must detail investment policies, risks (especially private equity for retail), subscription/redemption processes, liquidity tools, gates, and amendment...
SICAR Risk Capital: Modernizes definition to include equity, loans, bonds, mezzanine; clarifies direct/indirect investments with three cumulative elements (risk of total loss, no redemption rights,...
Compliance impact
Urgency: Medium – Not critical as existing funds are grandfathered with no retroactive changes required, but high relevance for new launches or material updates post-19 Dec 2025. It matters for operational efficiency (streamlined rules reduce fragmentation) and investor protection (tailored risks/disclosures), potentially lowering long-term costs while mitigating supervisory scrutiny; failure to update docs could delay approvals or trigger CSSF queries.
Rules applicable to undertakings for collective investment when they employ certain techniques and instruments relating to transferable securities and money market instruments
AI Analysis
Circular CSSF 08/356, as amended by Circular CSSF 25/901, establishes detailed rules for Luxembourg undertakings for collective investment (UCIs), including UCITS and alternative investment funds (AIFs), on the use of techniques and instruments relating to transferable securities and money market instruments, such as securities lending, repo transactions, and over-the-counter (OTC) derivatives. It matters because it ensures investor protection, risk management, and market stability by imposing strict eligibility, collateral, and operational requirements, aligning Luxembourg funds with EU standards under UCITS and AIFMD directives. Compliance is critical for Luxembourg-domiciled funds engaging in these activities to avoid regulatory sanctions and operational disruptions.
Key dates
23 December 2008
- Original Circular CSSF 08/356 effective date for UCITS III implementation
21 July 2011
- Partial updates for UCITS IV alignment
22 July 2013
- Extension to AIFs under AIFMD transposition
15 October 2025
- Issuance of amending Circular CSSF 25/901
01 January 2026
- Effective date for amendments (e.g., new collateral rules, reporting formats)
Suggested considerations
*Policy Review & Update: Revise fund prospectuses, KIIDs, and risk management policies to reflect amended limits (e.g., counterparty caps, ESG collateral) within 3 months of 01 January 2026.
*Risk Management Systems: Implement or upgrade systems for daily collateral valuation, stress testing, and exposure monitoring; conduct gap analysis against Section 4 requirements.
*Counterparty Due Diligence: Reassess OTC counterparties for eligibility (e.g., EMIR clearing thresholds); negotiate ISDA/CSA agreements with updated haircuts.
*Operational Setup: Appoint triparty agents where required; ensure collateral segregation complies with Section 5.
*Reporting & Disclosure: Prepare for new quarterly CSSF filings (template in Annex 1); disclose revenues/reinvestments from techniques in annual reports (Article 14 UCITS Law).
What changed
The original Circular CSSF 08/356 (2008) transposed UCITS III requirements on eligible techniques like securities lending and repos.
Expanded collateral rules: Collateral must now include sustainable assets meeting SFDR criteria, with daily marking-to-market and haircuts adjusted for liquidity and credit risk (Section 3).
Counterparty exposure limits: Net exposure to a single OTC counterparty capped at 10% of net asset value (NAV), down from previous thresholds in some cases, with mandatory collateralization (Section...
Operational safeguards: Mandatory use of triparty agents for repos, enhanced segregation of collateral, and annual stress testing disclosures (Section 5, as amended).
Reporting enhancements: Quarterly reports to CSSF on transaction volumes, risks, and revenues from these activities (Annex 1, updated).
These align with ESMA guidelines (e.g., ESMA/2012/832 on OTC...
Compliance impact
Urgency: High - Immediate relevance for funds actively using these techniques (common in fixed-income and equity strategies for yield enhancement). Non-compliance risks CSSF fines (up to 5% of NAV), temporary prohibitions on techniques, or fund suspension. With the 01 January 2026 effective date recently passed (as of current context), firms face heightened scrutiny in 2026 reporting cycles; proactive remediation avoids enforcement actions amid CSSF's focus on operational resilience.
amending Circular CSSF 22/811.Authorisation and organisation of entities acting as UCI administrators.
AI Analysis
Circular CSSF 25/900, issued on 16 December 2025, amends Circular CSSF 22/811 to clarify governance principles, authorisation requirements, and operational standards for UCI (Undertakings for Collective Investment) administrators in Luxembourg, while reforming annual reporting obligations. It matters because it strengthens supervisory oversight, aligns with DORA for ICT outsourcing, and simplifies reporting to enhance efficiency and compliance in the fund administration sector.
Key dates
January 2025
- DORA entry into force, applying to ICT outsourcing for in-scope UCIAs
16 December 2025
- Issuance date; repeal of Annex B of Circular CSSF 22/811 effective immediately
31 December 2025
- New reporting framework (SAQ and updated modalities) applies to all financial years ending on or after this date
Suggested considerations
Assess eligibility and obtain prior CSSF authorisation via Annex A application (or notify substantial changes); ensure ongoing validity by monitoring operational model and delegations.
Adapt internal processes for revised annual UCIA reporting (SAQ-focused, integrated where applicable); submit using CSSF website instructions starting for FY ending 31 Dec 2025.
Review/update contracts with UCIs/IFMs to define roles, responsibilities, and oversight; implement delegation monitoring, remediation plans, and ICT compliance (DORA/Circular 25/882 or 20/750).
For DORA-scope entities, align outsourcing arrangements with Circular CSSF 25/882.
What changed
- Repeals Annex B of Circular CSSF 22/811 with immediate effect, replacing it with streamlined annual reporting via a core compliance-focused Self-Assessment Questionnaire (SAQ) that assesses...
Introduces prior CSSF authorisation requirements for entities acting as UCI administrators, including a defined administrative procedure with application details in Annex A; authorisation remains...
Clarifies scope for eligible entities (e.g., UCIs, IFMs, management companies under Luxembourg law) performing one or more of three UCI administration functions (defined in point 10); mandates...
Aligns ICT outsourcing with DORA (effective January 2025) for in-scope UCIAs (credit institutions, investment fund managers, investment firms, certain support professionals), referencing Circular...
Strengthens delegation rules (section 3.5): prior CSSF notification for critical/important tasks, ongoing monitoring by UCI/IFM, and remediation plans for shortcomings.
Compliance impact
Urgency: High - Immediate repeal of prior reporting Annex requires prompt process updates; new framework applies to FY 2025 year-ends (just past as of Jan 2026), risking supervisory scrutiny or penalties for non-compliance; DORA alignment adds operational resilience pressure amid ongoing CSSF focus on fund admin governance.
Authorisation and organisation of entities acting as UCI administrators
AI Analysis
Circular CSSF 22/811, as amended by Circular CSSF 25/900, establishes CSSF requirements for the authorisation, governance, internal organisation, and oversight of entities acting as UCI (Undertakings for Collective Investment) administrators in Luxembourg. It matters because it standardises practices amid regulatory, technological, and market evolutions, ensuring robust controls, risk management, and supervision for fund administration activities critical to Luxembourg's fund industry.
Suggested considerations
Submit authorisation application to CSSF with Annex A information before commencing UCI administration; notify substantial changes and keep file updated.
Establish/implement governance, controls, escalation processes, resource adequacy, ICT/business continuity per circular; ensure single provider per function.
For delegations: Conduct due diligence, execute written contracts detailing roles/obligations, notify CSSF in advance, retain oversight without delegating monitoring.
Conclude written contracts with UCI/IFM; submit annual UCIA activity reports.
UCIs/IFMs: Supervise coordinators, ensure information exchange/cooperation with administrators.
What changed
- Authorisation Requirements: Prior CSSF authorisation is mandatory for appointment as UCI administrator, via full application under sectoral laws or a simplified administrative procedure;...
Scope of UCI Administration: Defines three core functions—registrar, NAV calculation/accounting, and client communication—requiring only one designated service provider per function per UCI (or...
Governance and Controls: Mandates sound governance principles, control frameworks, escalation processes for errors/incidents, adequate resources (human, ICT), business continuity, and compliance with...
Delegation Rules: Delegation of tasks allowed but not of monitoring/oversight; requires written contracts, due diligence, and prior CSSF notification (3 months generally, 1 month for certain agents);...
Contracts and Reporting: Written contracts between UCI administrator and UCI/IFM; annual activity reporting due 5 months after financial year-end, starting from financial years ending post-30 June...
Compliance impact
Urgency: High – Non-compliance risks CSSF sanctions, as authorisation is prior and ongoing; critical for Luxembourg fund ecosystem given evolutions in tech/markets/DORA. Firms must act promptly if unauthorised or misaligned, especially with annual reporting since 2023 and DORA integration; impacts operational models, delegations, and reporting immediately for active administrators.
This regulatory update from the CSSF provides information on the global situation of undertakings for collective investment at the end of October 2025, which is relevant for investment management and wealth management firms.
This regulatory update discusses a supply-chain attack targeting NPM packages, which could impact firms across the financial services sector. It is relevant for banks, fintechs, and all firms that rely on third-party software and services.
This press release provides an update on the global situation of undertakings for collective investment at the end of September 2025, which is relevant for investment management and wealth management firms.
This press release from the CSSF provides an update on the global situation of undertakings for collective investment at the end of August 2025, which is relevant for investment management and wealth management firms.
This regulatory update relates to the profit and loss account of credit institutions, which is relevant for banking and investment management firms. The topics of prudential/capital requirements and reporting/disclosure are also applicable. The update is informational in nature, so the urgency is low.
This press release from the CSSF provides an update on the global situation of undertakings for collective investment at the end of July 2025, which is relevant for investment management and wealth management firms.
This press release from the CSSF appears to be related to regulatory oversight and authorization for BGL BNP Paribas, a bank operating in the banking, investment management, and wealth management sectors.
This regulatory update from the CSSF provides information on the global situation of undertakings for collective investment at the end of June 2025, which is relevant for investment management and wealth management firms.
This press release from the CSSF provides an update on the global situation of undertakings for collective investment at the end of May 2025, which is relevant for investment management and wealth management firms.
This regulatory update relates to the profit and loss account of credit institutions, which is relevant for banking and investment management firms. The topics of prudential/capital requirements and reporting/disclosure are also applicable. The update is informational in nature, so the urgency is low.
This press release from the CSSF provides an update on the global situation of undertakings for collective investment at the end of April 2025, which is relevant for investment management and wealth management firms.
This regulatory update from the CSSF in Luxembourg focuses on the use of artificial intelligence in the financial sector, which impacts banking, investment management, and wealth management firms.
This regulatory update provides information on the global situation of undertakings for collective investment at the end of March 2025, which is relevant for investment management and wealth management firms.
This regulatory update relates to the mandate and audit charter for the Internal Auditors Committee of the Eurosystem/ESCB and the Single Supervisory Mechanism. It is relevant for banks, asset managers, and wealth managers as it covers prudential requirements, operational resilience, and reporting obligations.
This press release from the CSSF provides an update on the global situation of undertakings for collective investment at the end of February 2025, which is relevant for investment management and wealth management firms.
This regulatory update relates to the profit and loss account of credit institutions, which is relevant for banking, investment management, and wealth management firms. The topics covered include prudential requirements, reporting, and licensing, which are important for these sectors.
This regulatory update relates to the takeover of Iris Financial S.A. by Younited Financial S.A., which are firms operating in the banking, investment management, and wealth management sectors. The key topics covered include authorization and licensing, prudential/capital requirements, and consumer protection.
This regulatory update relates to the application form for third country auditors and audit entities, which is relevant for banking, investment management, and wealth management firms that may need to engage such auditors.
This appears to be a general news update from the CSSF regulator, likely containing information relevant to multiple financial sectors and firm types. The lack of detailed content description suggests this is a low urgency, informational update.