Crypto Overview in Luxembourg

Regulatory data is for informational purposes only and may not reflect the most current legal developments. Always consult qualified professionals before making decisions.

Legal Classification and Regulatory Framework

Cryptocurrency Status

Luxembourg does not treat cryptocurrencies as legal tender, but they are fully legal to hold, trade, and use. The country has taken a progressive, structured approach through a series of four Blockchain Laws enacted between 2019 and 2024. Blockchain Law I (Law of 1 March 2019) recognised distributed ledger technology as legally equivalent to traditional systems for securities registration and transfer. Subsequent laws expanded this scope: Blockchain Law II (Law of 22 January 2021) broadened access to DLT-based securities issuance, Blockchain Law III (Law of 14 March 2023) implemented the EU DLT Pilot Regime and recognised DLT-native instruments as eligible financial collateral, and Blockchain Law IV (Law of 19 December 2024) introduced a “control agent” role for DLT-issued securities, extended the framework to unlisted equity securities and tokenised physical assets including real estate, and enabled smart contract-based automated payments such as dividends and interest.

Since 30 December 2024, the EU Markets in Crypto-Assets Regulation (MiCAR) provides the primary classification framework, dividing crypto-assets into asset-referenced tokens, electronic money tokens, and other crypto-assets including utility tokens. Crypto-assets that qualify as transferable securities continue to fall under MiFID II and the Prospectus Regulation.

Tax Treatment

Luxembourg has no dedicated crypto tax legislation. Crypto-assets are taxed under general tax principles as set out in a guidance circular issued in July 2018. For individuals, capital gains on cryptocurrency held longer than six months are exempt from income tax, provided the activity is not professional in nature. Gains on assets held less than six months are taxable as miscellaneous income at progressive rates up to 42%, though annual speculative gains below EUR 500 are exempt. Professional trading is treated as commercial income at the same progressive rates. Mining income is not taxed upon receipt but becomes taxable when mined assets are disposed of. There is no individual wealth tax on crypto holdings.

For businesses, the combined corporate tax rate in Luxembourg City is approximately 23.87%, consisting of a 17.12% corporate income tax (including solidarity surtax) and a 6.75% municipal business tax. Corporate entities are subject to a net wealth tax of 0.5% on the fair market value of crypto holdings. Cryptocurrency-to-fiat exchanges are exempt from VAT, consistent with the Court of Justice of the European Union ruling in the Hedqvist case.

Luxembourg transposed the EU’s eighth Directive on Administrative Cooperation (DAC8) through the Law of 27 March 2026. From 1 January 2026, crypto-asset service providers must collect and report transaction data on reportable users to Luxembourg tax authorities by 30 June of the following year, with the first automatic cross-border exchange scheduled for 30 September 2027. Non-compliance carries penalties of up to EUR 250,000 for material breaches.

Regulatory Oversight

The Commission de Surveillance du Secteur Financier (CSSF) is Luxembourg’s sole competent authority for crypto-asset regulation. The CSSF handles CASP authorisation under MiCAR, AML/CFT supervision, fund supervision involving crypto exposure, and enforcement. It has full supervisory and investigative powers including on-site inspections and administrative sanctions. Luxembourg’s financial intelligence unit, the Cellule de Renseignement Financier (CRF), handles suspicious transaction reporting and coordinates with the CSSF on AML/CFT matters. The CSSF also operates an Innovation Hub providing guidance for fintech businesses navigating the regulatory landscape.

Business Environment

Banking Relationships

Luxembourg’s established financial sector provides strong infrastructure for crypto businesses. Standard Chartered launched a Luxembourg entity in January 2025 as its EU regulatory entry point for digital asset custody, initially covering Bitcoin and Ethereum. Clearstream (Deutsche Borse) operates crypto-related services from Luxembourg, leveraging the existing fund infrastructure. The country’s investment fund industry, the second largest globally after the United States, has become increasingly open to digital assets.

In a notable signal of institutional acceptance, Luxembourg’s Fonds Souverain Intergenerationnel du Luxembourg (FSIL), the country’s intergenerational sovereign wealth fund, allocated a portion of its portfolio to Bitcoin through regulated Bitcoin ETFs, with its revised investment policy allowing up to 15% in alternative investments including digital assets. Luxembourg is also piloting a blockchain-based treasury certificate supervised by the CSSF and the Central Bank, testing DLT for short-term sovereign debt issuance.

Innovation Support

The Luxembourg House of Financial Technology (LHoFT) serves as the country’s primary fintech innovation hub, a public-private partnership connecting financial institutions, startups, research institutions, and regulators. It offers incubation, co-working spaces, and a soft-landing platform for international fintechs entering the market.

The Luxembourg Blockchain Lab, a joint initiative of Infrachain, LHoFT, the Luxembourg Institute of Science and Technology (LIST), and the University of Luxembourg, focuses on knowledge dissemination, education, talent attraction, and connecting industries with DLT solutions. Luxembourg Blockchain Week and the Luxembourg House of Web3 contribute further to an active ecosystem for blockchain innovation.

Crypto License in Luxembourg

Luxembourg operates one of the EU’s most complete CASP licensing regimes under MiCAR, administered exclusively by the CSSF. The Law of 6 February 2025 formally transposed MiCAR into national law, repealed the prior national VASP registration framework, and confirmed the CSSF as the single point of contact for all authorisation, supervision, and enforcement. A CSSF CASP authorisation carries EU-wide passporting rights, enabling licensed firms to provide services across all 27 member states and the broader European Economic Area without additional national licences.

Licensing Requirements

CASP authorisation under MiCAR Article 63 is structured around four pillars. First, applicants must submit a detailed programme of activities specifying the services they intend to provide and the client categories they will serve. Second, governance requirements mandate at least two Luxembourg-resident directors who demonstrate sufficient reputation and relevant experience; fit-and-proper assessments apply to all management body members. Third, technical and operational resilience requirements reflect the Digital Operational Resilience Act (DORA), covering ICT risk management, third-party controls, incident reporting, and business continuity planning. Fourth, applicants must hold adequate prudential resources: minimum own funds of EUR 50,000 for advisory, portfolio management, order execution, and transfer services; EUR 125,000 for custody and exchange against fiat or other crypto-assets; and EUR 150,000 for operating a trading platform. AML/CFT controls aligned with Luxembourg’s Law of 12 November 2004 are mandatory throughout. The CSSF’s 2025 National Risk Assessment formally classified the crypto sector as high risk for money laundering, raising the baseline compliance standard expected of applicants.

Authorised Activities

MiCAR defines ten categories of crypto-asset service for which CASP authorisation may be granted: custody and administration of crypto-assets on behalf of clients; operation of a trading platform; exchange of crypto-assets for funds; exchange of crypto-assets for other crypto-assets; execution of orders on behalf of clients; placing of crypto-assets; reception and transmission of orders; providing advice on crypto-assets; providing portfolio management; and providing transfer services. Firms already holding regulated status as credit institutions, investment firms, electronic money institutions, UCITS management companies, or alternative investment fund managers may provide certain crypto-asset services by simple notification to the CSSF rather than full authorisation, where those services fall within the scope of their existing licence.

Application Process and Timeline

Applicants typically begin with a pre-application meeting with the CSSF Innovation Hub to discuss the proposed business model and identify the applicable authorisation scope. The formal dossier is then submitted electronically. The CSSF has 25 working days to declare an application complete, and a further 40 working days (extendable to 20 more if clarifications are needed) to reach an authorisation decision. In practice, the CSSF has indicated that first authorisations under MiCA cannot be issued before July 2026, pending the finalisation of Level 2 and Level 3 technical standards at EU level. VASPs registered under the former national regime before 30 December 2024 may continue operating under a grandfathering provision until 1 July 2026, by which date they must hold full CASP authorisation or cease providing services. Bitstamp Europe S.A. became the first exchange to receive a CSSF CASP licence under MiCAR, on 16 May 2025, using Luxembourg as its EU regulatory hub. Coinbase Luxembourg S.A. has also secured CSSF CASP authorisation, passporting services across the EU.

Market Characteristics

Adoption Patterns

Luxembourg’s crypto adoption is heavily institutional, shaped by the country’s position as a global financial centre. The fund industry is a primary driver: the CSSF’s February 2026 FAQ update (Version 7, published 4 February 2026) provided the first clear pathway for UCITS funds to hold indirect crypto exposure up to 10% of net asset value through eligible transferable securities such as ETPs and ETFs, subject to prior CSSF notification and enhanced governance requirements. Retail alternative investment funds may invest directly or indirectly up to 10% of NAV, while professional and institutional AIFs may hold higher allocations subject to CSSF approval. Because Luxembourg-domiciled UCITS are distributed across the EU via passporting, these clarifications open regulated crypto exposure to retail investors across the continent.

Industry Focus

Luxembourg’s crypto industry centres on institutional-grade services: fund structuring, custody, tokenisation of securities and real assets, and compliant exchange operations. The four Blockchain Laws have made the jurisdiction particularly attractive for security token issuance and DLT-based financial instruments. The European Investment Bank has used Luxembourg’s framework for DLT-based bond issuances, achieving near-instant settlement. The CSSF has also registered Luxembourg’s first Bitcoin-focused alternative investment fund manager, further establishing the country as a hub for crypto-focused fund management.

Regulatory Evolution

Luxembourg’s approach has been methodical, building legal infrastructure through successive blockchain laws while aligning with EU harmonisation. The Law of 6 February 2025 completed the MiCA implementation by designating the CSSF as sole competent authority, repealing the national VASP regime, and establishing the CASP authorisation framework with full supervisory powers.

In the FATF mutual evaluation published in September 2023, Luxembourg was rated compliant or largely compliant on 39 of 40 FATF Recommendations, reflecting a high level of technical compliance. The evaluation praised the quality of financial intelligence produced by the CRF and the CSSF’s well-informed understanding of money laundering and terrorist financing risks. Areas identified for improvement included strengthening prosecution of complex money laundering cases and enhancing non-financial sector supervision. Luxembourg published an updated National Risk Assessment in 2025, formally classifying the crypto sector as high risk.

With progressive legislation, a world-class fund industry, major global platforms choosing Luxembourg as their EU licensing base, and a sovereign wealth fund embracing digital assets, Luxembourg has positioned itself as one of Europe’s premier jurisdictions for regulated crypto-asset services.