The CSSF has been made aware of ongoing phishing campaigns targeting organisations using Microsoft 365, specifically Office 365 tenants where multi-factor authentication (MFA) is not enforced. CIRCL, the Computer Incident Center Luxembourg, published a report on this subject, including recommendations, available at this URL: https://www.circl.lu/pub/tr-94/.…

Following numerous requests from the industry, a new delegation management system will be implemented on the Key Information Document (KID) submission procedure from 26 June 2025. This will enable a declarant to delegate a scope of funds under management to a sender (a legal entity,…

In accordance with Article 16 of Regulation (EU) No 537/2014, the Commission de Surveillance du Secteur Financier (“the CSSF”) hereby publishes the list of independent réviseurs d’entreprises agréés (approved statutory auditors) and of cabinets de révision agréés (approved audit firms) that have received less than 15% of the total…

Pursuant to Circular CSSF 19/721 – Dematerialisation of requests to the CSSF and to further improve the transmission of specific communications (such as surveys, data collection exercises, thematic requests, invitations for events and conferences) whilst ensuring the protection of confidential data, the CSSF informs the UCI…

The CSSF is issuing the present guide following the request from the market to receive more detailed information related to the error and warning messages raised by the ESAs as a result of the validation checks they perform on the received registers of information. This…

This session will focus upon the complexities and challenges of establishing beneficial ownership and control of legal entities, a practical capacity-building session led by an experienced subject matter expert in the field of conducting investigations and identifying ownership and control of companies and other types…

The CSSF wishes to draw the attention of réviseurs d’entreprises agréés to the Law of 15 August 2023 transposing Directive (EU) 2021/2101 of the European Parliament and of the Council of 24 November 2021 amending Directive 2013/34/EU as regards disclosure of income tax information by…

As indicated in a previous communiqué published on 15 Janvier 2025, financial entities were required to submit their relevant registers of information to the CSSF, then correct and re-submit their registers of information via eDesk until the end of April 2025. The CSSF announces today that the…

Following the end of their user acceptance testing (UAT) of the reception of the Register of Information (RoI), the ESAs have published ‘Observations from testing of RoI reporting to the ESAs. Key common issues identified’, a document listing the key common issues identified during this…