Live Updates

Annex to Circular CSSF 22/822

AI Analysis

Executive Summary

CSSF published a new **Annex to Circular CSSF 22/822** on **22 June 2026**, updating the Luxembourg regulator’s reference list of FATF **high-risk jurisdictions** and **jurisdictions under increased monitoring**. For compliance teams, this matters because AML/CFT country-risk scoring, enhanced due diligence triggers, and sanctions-style controls must be aligned to the current FATF position reflected by CSSF.

What Changed

  • - CSSF republished the annex to Circular CSSF 22/822 in a Version of 19 June 2026, meaning firms should treat this as the current Luxembourg reference point for FATF jurisdiction screening and country-risk assessment.
  • The annex distinguishes between high-risk jurisdictions subject to enhanced due diligence and, where appropriate, counter-measures, and jurisdictions under increased monitoring that require heightened risk awareness but are not automatically subject
  • The publication incorporates the FATF’s current statements on jurisdictions with strategic AML/CFT/CPF deficiencies, which is the basis for operational country-risk controls used by Luxembourg-supervised firms.
  • The related Circular CSSF 22/822 remains the framework document that instructs professionals to use FATF statements when assessing jurisdictional ML/TF/PF risk.

Suggested Considerations

  • Review your AML/CFT country-risk methodology and update it to reflect the 19 June 2026 FATF/CSSF jurisdiction list.
  • Re-screen customers, beneficial owners, counterparties, and transactions against the updated high-risk and monitored jurisdiction lists.
  • Apply enhanced due diligence for relationships and transactions involving high-risk jurisdictions, and escalate where counter-measures may be required.
  • Reassess risk ratings for customers linked to jurisdictions under increased monitoring and document the rationale for any continued onboarding, retention, or exit decisions.
  • Update automated screening rules, transaction-monitoring scenarios, and onboarding checklists so they use the current CSSF annex version.
  • Ensure AML files, policies, and procedures reference Circular CSSF 22/822 and its latest annex rather than older versions.

Key Dates

27 October 2022
- Circular CSSF 22/822 was issued, establishing the framework for using FATF statements on high-risk jurisdictions and jurisdictions under increased monitoring
19 June 2026
- The annex was updated to this version date, reflecting the current FATF jurisdiction lists and associated risk posture
22 June 2026
- CSSF published the annex on its website, making the updated reference document operationally relevant for supervised firms

Compliance Impact

Non-compliance can lead to supervisory findings, remediation orders, and possible enforcement action where firms fail to apply risk-sensitive AML controls consistent with CSSF/FATF expectations. The practical impact is highest for onboarding, correspondent-like relationships, cross-border payments, and any business line exposed to higher-risk jurisdictions.

Who is Affected

Luxembourg credit institutions and banksInvestment firms and asset managersPayment institutions and e-money institutionsCrypto-asset service providersasset actors supervised in Luxembourg, where applicableInsurance undertakings and intermediariesAll CSSF-supervised financial sector professionalsrisk controls

AI-generated analysis. May contain errors or omissions — verify with the original CSSF source before acting. Full disclaimer.

Summary

1) high-risk jurisdictions on which enhanced due diligence and, where appropriate, counter-measures are imposed2) jurisdictions under increased monitoring of the FATFVersion of 19 June 2026

Relevant Firm Types

BankAsset ManagerFintechAll Firms
View Original on CSSF Back to Feed

Share this update