Luxembourg adds crypto exchanges to FIU fraud alerts

Luxembourg’s Financial Intelligence Unit can now issue cross-institution fraud alerts to banks, payment firms and licensed cryptocurrency exchanges under Bill 8722, which was approved in July and took effect on Aug. 8. The bill was introduced in March by Justice Minister Elisabeth Margue and published in the Journal officiel on Aug. 4.

The change follows a 2024 “CEO fraud” case in which fraudsters impersonated executives and stole just over $70 million from the charity Caritas. Luxembourg police recorded 6,382 fraud cases in 2024, a rise of nearly 4% year on year, and reports of suspected scams submitted by financial professionals rose about 32% to more than 18,000.

The 75-member FIU, which operates under the public prosecutor’s office, gains authority to send rapid alerts and broad asset-freezing notices across the country’s financial sector. Notices will be sent through a secure, data-compliant IT system directly to authorised firms in Luxembourg. The FIU held an informational session for compliance officers on Aug. 6 to prepare for the law’s implementation two days later.

Before the law, banks could block or freeze transactions only within their own systems. Once funds moved to another provider or a crypto exchange, there was no statutory way for authorities to notify the recipient to stop transfers. Luxembourg has grown as a European centre for cryptocurrency platforms since recent EU regulatory changes, increasing the number of exchanges and digital-wallet providers operating in the country.

Max Braun, director of the FIU, told reporters the alert system “will make cashing out of the accounts more difficult” for fraud syndicates and that it provides liability protection for crypto-wallet operators whose customers are often located outside the Grand Duchy. He added the new notices give the FIU an additional tool to prevent CEO fraud and warned the measure will not remove all forms of sophisticated corporate fraud.

The law also clarifies cooperation rules between the FIU and private compliance teams and includes data-protection safeguards for information transfers. FIU officials say the alerts are intended to speed up response times and reduce the chance that suspected funds can be moved between providers before a coordinated block is in place.