LU v2.0 Sign in

LU (LU) · Module W11 · Derived Confidence: Probable

LU: AML/CFT & Financial Crime

← Full LU Dossier (14 modules) Open LU in Co-Pilot ↗ Request Bespoke Deeper Dive

#

Sentinel position (payments context only): Luxembourg's AML/CFT framework rests on the Law of 12 November 2004 and CSSF Regulation 12-02, with the CSSF as AML/CFT supervisor for PIs, EMIs, VASPs and banks, and the CRF (FIU) receiving STRs. Online service providers (PIs, EMIs, VASPs, online banks) are major STR filers. The incoming EU AMLR/AMLA regime and IPR Article 5d daily sanctions screening reshape obligations. Carried as Sentinel feed, not original WPM AML analysis.

Standing sub-brief · as of 27 June 2026214 words · last cycle 2026-06-27

AML/CFT & Financial Crime

This module is sourced from the Sentinel.gi feed and is carried as provenance only; original illicit-finance analysis is routed to the Sentinel (sentinel.gi) rather than conducted here. Per the Sentinel feed, the CSSF is the AML/CFT supervisor with power of injunction and broad sanctioning powers over supervised persons including PIs, EMIs, VASPs and banks, with sanctions generally made public and without prejudice to criminal prosecution. The supervisory reach spans both bank-PSPs and non-bank PIs/EMIs/VASPs, framing the financial-crime compliance burden for Luxembourg payment operators.

Also per the Sentinel feed, IPR Article 5d (applying from 9 January 2025 to in-scope PSPs including PIs and EMIs) requires a shift from transaction-level to daily customer-level sanctions screening with event-triggered re-screening, sitting alongside the broader Luxembourg AML framework. This shift materially changes screening-system operating requirements for Luxembourg PSPs. The illicit-finance significance of both items is flagged cross-monitor to Sentinel (sentinel.gi). A caveat: the Sentinel-carried STR statistics may be dated, and current bank-versus-non-bank supervision-gap analysis is out of WPM scope.

Outlook

W11 is established as a Sentinel-fed surface. The forward watch — daily customer-level sanctions screening adoption under IPR Article 5d and the evolution of CSSF AML sanctioning practice — is carried here as provenance only, with substantive illicit-finance analysis owned by Sentinel (sentinel.gi). Trajectory: established.

no periodic updates on record for this sub-brief

Coverage Gaps (not_examined model · S-1)3 deficiency record(s) separated from substantive evidence
  • not_examined Gap: sourcing-thinness (Sentinel (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004))
  • not_examined Gap: regulatory-failure (Sentinel (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002))
  • not_examined Gap: enforcement-absence (Sentinel (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001))
Sources and findings (3 unique sources · R-3/R-4)
  1. [W11-E1] T3 Derived: Probable in_forcehttps://regreportingdesk.com/sepa-instant-payments-regulation/ re-verified

    sentinel: IPR Article 5d (applying from 9 January 2025 to in-scope PSPs including PIs and EMIs) requires a shift from transaction-level to daily customer-level sanctions screening with event-triggered re-screening, sitting alongside the broader Luxembourg AML framework.

  2. [W11-E2] T2 Derived: Probable in_forceSentinel (sentinel.gi) per-JID baseline profile — Luxembourg re-verified

    Luxembourg's AML/CFT regime rests on the 2004 AML/CFT Law as amended to transpose EU AMLD4/5, supervised by the CSSF (financial sector, VASPs) and the CRF-FIU (prosecutor's office). FATF's 2023 MER found a solid technical framework and good financial-intelligence use, but weak domestic ML investigation/prosecution, asset recovery, and non-financial-sector supervision.

  3. [W11-E4] T1 Derived: Confirmed in_force Collapsed 2× usesSentinel (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-001) re-verified

    Sanctions: EU listing