What is the status of the FATF Travel Rule implementation in Luxembourg? Include: whether adopted, effective date, thres

Generated by ai-lab-1 on 2026-04-11T03:48:56.740Z Source: justfixit.AI Worker Lab

Luxembourg has fully adopted the FATF Travel Rule through Regulation (EU) 2023/1113 (the new Funds Transfer Regulation) and EBA Travel Rule Guidelines (EBA/GL/2024/11), which became applicable on 30 December 2024.[1][3]

Adoption and Legislation

The Travel Rule is implemented in Luxembourg under multiple legal frameworks:[1][3] Regulation (EU) 2023/1113, Luxembourg's Loi du 12 novembre 2004 (Law on combating money laundering and terrorism financing), and guidance from the Commission de Surveillance du Secteur Financier (CSSF), Luxembourg's financial regulator.[4] The CSSF issued Circular CSSF 25/879 formally adopting the EBA Guidelines for all payment service providers, intermediary payment service providers, and crypto-asset service providers operating in Luxembourg.[3]

Threshold

Luxembourg has zero threshold, meaning Travel Rule requirements apply to all virtual asset transfers regardless of amount or whether they are domestic or cross-border.[2] This contrasts with the FATF's recommended USD/EUR 1,000 threshold and differs from other jurisdictions like the USA ($3,000) and Canada (CAD 1,000).[2]

Coverage and Requirements

The regulations apply to both funds and crypto-asset transfers and cover all payment service providers (PSPs), intermediary PSPs, and Crypto-Asset Service Providers (CASPs).[1][3] VASPs must collect and share identifying information about both the originator and beneficiary with each transaction.[1][2] A technical transition period for CASPs extends until 31 July 2025, provided compensating controls are in place.[1]

Technical Implementation Requirements

The EBA Guidelines provide detailed specifications including:[1]

• Detection of missing or meaningless data (e.g., "xxxxx")
• Handling repeated failures by counterparties
• Management of transfers involving self-hosted wallets
• Deadlines for responding to information requests

Additionally, sanctions screening is now mandatory, requiring institutions to check originator and beneficiary information against applicable sanctions lists rather than simply transmitting the data.[2]