Luxembourg permits crypto-related activity but currently has no dedicated national travel-rule statute; instead, the EU's Transfer of Funds Regulation (as supplemented by the AMLR) will impose travel-rule obligations on Crypto-Asset Service Providers (CASPs) from 10 July 2027, when the AMLR applies Source: CSSF AMLR Communiqué

The CSSF (Commission de Surveillance du Secteur Financier) is the competent authority for monitoring international financial sanctions and AML/CFT compliance by financial sector professionals in Luxembourg Source: CSSF International Financial Sanctions

No licensing regime specific to virtual assets or CASPs has been identified in Luxembourg's current legal framework; the AMLR will introduce EU-wide obligations, but the law of 19 December 2020 on restrictive measures currently applies to all persons operating in or from Luxembourg territory Source: CSSF International Financial Sanctions

As of the provided source materials, no entity has been identified as holding a Luxembourg crypto or virtual-asset service provider license, and no such license type is described in the sources Source: CSSF AMLR Communiqué

The practical reality is that Luxembourg relies on EU-level regulations; the AMLR will apply directly from 10 July 2027 with travel-rule-related requirements, and the future EU AMLA will begin direct supervision of selected obliged entities in 2028 Source: CSSF AMLR Communiqué

The CSSF (Commission de Surveillance du Secteur Financier) is the primary financial regulator in Luxembourg responsible for monitoring the implementation of international financial sanctions and AML/CFT compliance for financial sector professionals, with its website at cssf.lu Source: CSSF International Financial Sanctions

The Law of 19 December 2020 on the implementation of restrictive measures in financial matters is a key national law, with details provided by the Grand-ducal Regulation of 14 November 2022 Source: CSSF International Financial Sanctions

The Law of 27 October 2010 (consolidated version) enhances the anti-money laundering and counter terrorist financing legal framework, organises controls of physical transport of cash entering, transiting through or leaving Luxembourg, and implements United Nations Security Council resolutions Source: CSSF International Financial Sanctions

The Regulation of the European Parliament and of the Council on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing (AMLR) was published in the Official Journal of the European Union on 19 June 2024; it will enter into force on the twentieth day following its publication and will apply from 10 July 2027 Source: CSSF AMLR Communiqué

The Directive on mechanisms to be put in place by Member States for the prevention of the use of the financial system for money laundering or terrorist financing (AMLD6) was also published on 19 June 2024; it repeals Directive (EU) 2015/849, and Member States have three years from its entry into force to transpose it into national legislation Source: CSSF AMLR Communiqué

The Regulation establishing the Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLAR) was published on 19 June 2024; it will apply from 1 July 2025, and AMLA will start direct supervision of selected obliged entities in 2028 Source: CSSF AMLR Communiqué

AMLA's seat will be located in Frankfurt am Main, Germany, as announced on 22 February 2024 Source: CSSF AMLR Communiqué

The AMLR provides for EU-wide rules on the scope of obliged entities, internal policies, controls and procedures, customer due diligence, beneficial ownership transparency, reporting obligations, record-retention, and measures to mitigate risks from anonymous instruments Source: CSSF AMLR Communiqué

The AMLR expands the scope of obliged entities to include Crypto-Asset Service Providers (CASPs), crowdfunding platforms, and other high-risk sectors; virtual IBANs are for the first time included in the scope of application Source: CSSF AMLR Communiqué

Council Regulation (EU) 2019/796 of 17 May 2019 concerns restrictive measures against cyber-attacks threatening the Union or its Member States, which is directly applicable in Luxembourg Source: CSSF International Financial Sanctions

Luxembourg must enforce international financial sanctions by any natural or legal person operating in or from Luxembourg territory, in addition to Luxembourg nationals Source: CSSF International Financial Sanctions

The application of international financial sanctions includes prohibitions or restrictions of certain financial activities/services and the freeze of funds, assets, or other economic resources, targeting persons and entities associated with Al-Qaida, the Taliban, or persons cited under European regulations concerning Belarus, Iran, and other countries Source: CSSF International Financial Sanctions

No specific licensing regime for crypto-asset service providers or virtual asset businesses is described in the provided source materials for Luxembourg Source: CSSF International Financial Sanctions

The AMLR will bring Crypto-Asset Service Providers (CASPs) within the scope of obliged entities subject to EU-wide AML/CFT rules, but the source materials do not detail a national licensing process, capital requirements, or application timeline for CASPs in Luxembourg Source: CSSF AMLR Communiqué

The CSSF is the competent authority to monitor the implementation of restrictive measures for professionals of the financial sector, which includes oversight of financial sector actors but does not constitute a virtual-asset licensing function as described in the sources Source: CSSF International Financial Sanctions

The Law of 19 December 2020 on the implementation of restrictive measures in financial matters, supplemented by the Grand-ducal Regulation of 14 November 2022, applies to any Luxembourg natural or legal person as well as any other natural or legal person operating in or from Luxembourg territory, but these laws address sanctions implementation rather than licensing Source: CSSF International Financial Sanctions

As of the information provided, zero entities have been identified as licensed under any Luxembourg crypto or virtual-asset-specific licensing regime; the sources do not reference any such licenses having been granted Source: CSSF AMLR Communiqué

The AMLR will be directly applicable in all EU Member States, meaning Luxembourg will not need to transpose it into national law; it sets forth detailed substantive requirements in the same way across Member States Source: CSSF AMLR Communiqué

The AMLR requires obliged entities to verify whether the customer and/or the beneficial owners are subject to targeted financial sanctions, to ensure risks of non-implementation or evasion of targeted financial sanctions are appropriately mitigated Source: CSSF AMLR Communiqué

For legal entities, both natural and legal persons that control the legal entity or hold more than 50% of the proprietary rights or majority interest of that legal entity, whether individually or collectively, must be verified against targeted financial sanctions lists Source: CSSF AMLR Communiqué

Beneficial owners are defined as natural persons who have, directly or indirectly, an ownership interest in the corporate entity; or control, directly or indirectly, the corporate or other legal entity through ownership interest or via other means Source: CSSF AMLR Communiqué

The threshold to determine ownership interest in a corporate entity is set at 25% or more of the shares or voting rights or other ownership interests in the corporate entity, including rights to a share of profits, other internal resources, or liquidation balance; all shareholdings at every level of ownership shall be considered Source: CSSF AMLR Communiqué

Member States can identify categories of corporate entities exposed to higher ML/TF risks and propose a lower threshold to the Commission, but the lower threshold shall not be lower than 15% Source: CSSF AMLR Communiqué

Records shall be kept of the actions taken to identify the beneficial owner; in case no beneficial owner(s) could be determined, a statement must accompany this, justifying why it was not possible to determine the beneficial owner(s) Source: CSSF AMLR Communiqué

The requirement to provide the details of all natural persons who hold the position of senior managing officials is no longer conceived as the identification of a beneficial owner but as an alternative fall-back option Source: CSSF AMLR Communiqué

Obliged entities shall report any discrepancies between the information available in the beneficial owner register and the information they are obliged to collect under the AMLR, without undue delay and in any case within 14 calendar days of detection; reports shall include information obtained indicating the discrepancy and whom the entity considers to be the beneficial owners Source: CSSF AMLR Communiqué

Enhanced due diligence (EDD) obligations are included for CASPs in cross-border correspondent relationships, and for credit and financial institutions for business relationships with high-net-worth individuals with total wealth exceeding EUR 50,000,000 involving handling of assets under management exceeding EUR 5,000,000 Source: CSSF AMLR Communiqué

All obliged entities will have to conduct EDD measures for occasional transactions and business relationships involving high-risk third countries, based on an assessment considering the lists drawn up by the Financial Action Task Force (FATF) Source: CSSF AMLR Communiqué

An EU-wide maximum limit of EUR 10,000 is set for cash payments, with Member States having the flexibility to impose a lower maximum limit based on specific national risks Source: CSSF AMLR Communiqué

Customer and beneficial owner identification requirements have been extended to virtual IBANs, which are defined as "an identifier causing payments to be redirected to a payment account identified by an IBAN different from that identifier" Source: CSSF AMLR Communiqué

The Law of 27 October 2010 (consolidated version) enhances the anti-money laundering and counter terrorist financing legal framework and implements United Nations Security Council resolutions, constituting part of Luxembourg's current AML/CFT legal basis Source: CSSF International Financial Sanctions

AMLD6 provides enhanced rules regarding beneficial ownership information recorded in Central Registers, which shall verify within a reasonable time following submission of beneficial ownership information and on a regular basis thereafter that the information is adequate, accurate, and up-to-date Source: CSSF AMLR Communiqué

Central Registers shall withhold or suspend the proof of registration in the Central Register until failures have been corrected in cases of inconsistencies or inaccuracies, and data shall be screened against designations in relation to targeted financial sanctions Source: CSSF AMLR Communiqué

Centralised automated mechanisms (in Luxembourg, currently the central register of bank accounts, CRBA) shall include information on bank accounts (including virtual IBANs), payment accounts, securities accounts, crypto-asset accounts, and safe deposit boxes, and shall be interconnected at EU level to enable Financial Intelligence Units to obtain swiftly cross-border information Source: CSSF AMLR Communiqué

The obligations in the context of targeted financial sanctions are rule-based, and the AMLR clarifies that control via other means shall be identified independently of, and in parallel to, the existence of an ownership interest or control through ownership interest Source: CSSF AMLR Communiqué

No specific enforcement actions against crypto or virtual asset firms for travel-rule violations are described in the provided source materials for Luxembourg Source: CSSF International Financial Sanctions

The CSSF monitors the implementation of restrictive measures for financial sector professionals, and international financial sanctions apply to any person operating in or from Luxembourg territory, but no specific fines, penalties, or cases are cited in the sources Source: CSSF International Financial Sanctions

The AMLR and AMLD6 will introduce new supervision mechanisms, with AMLA conducting direct supervision of selected obliged entities from 2028, but no enforcement actions related to travel-rule compliance have been identified in the provided sources Source: CSSF AMLR Communiqué

No tax guidance has been issued for virtual assets in the provided source materials; the sources focus exclusively on AML/CFT regulations and international financial sanctions Source: CSSF International Financial Sanctions

The United States Department of State page for Luxembourg mentions a Double Taxation Agreement (Luxembourg 19-909) but does not address crypto-specific tax treatment or virtual asset taxation Source: US State Department Luxembourg

Luxembourg currently lacks a specific national travel-rule statute for crypto-assets; the AMLR will apply EU-wide from 10 July 2027, leaving a gap between now and that date Source: CSSF AMLR Communiqué

The AMLR expands the scope of obliged entities to include CASPs, but this expansion does not take effect until the AMLR applies from 10 July 2027, meaning CASPs in Luxembourg may not currently be subject to EU-wide AML/CFT obligations under this regulation Source: CSSF AMLR Communiqué

The AMLD6 must be transposed into national legislation by Member States within three years of its entry into force, creating potential implementation delays and inconsistencies across the EU, including Luxembourg Source: CSSF AMLR Communiqué

AMLA will begin direct supervision of selected obliged entities only in 2028, leaving a period where supervision of CASPs in Luxembourg may be less coordinated at the EU level Source: CSSF AMLR Communiqué

The sources do not identify the Luxembourg national authority responsible for licensing CASPs or virtual asset service providers, nor do they describe capital requirements, application processes, or timelines for such licensing Source: CSSF International Financial Sanctions

Businesses face risks from the expansion of sanctions compliance obligations; the instructions require verification of customers and beneficial owners against targeted financial sanctions lists, and the AMLR extends this to legal persons controlling entities with more than 50% proprietary rights or majority interest Source: CSSF AMLR Communiqué

The centralised automated mechanisms must be interconnected at EU level, but Luxembourg's current mechanism (the CRBA) will need significant technical and regulatory updates to include crypto-asset accounts and virtual IBANs Source: CSSF AMLR Communiqué