On 16 March 2026, the CSSF issued a further circular letter confirming that the final relevant documents for the AML/CFT standardised data collection have now been made available by AMLA and can be accessed via eDesk. The circular letter is addressed to credit institutions, investment firms, investment fund managers (including registered AIFMs, Luxembourg branches of investment fund managers, SIAG, FIAAG and investment funds which did not designate an investment fund manager), payment institutions and electronic money institutions, virtual asset service providers, crypto asset service providers, and central securities depositories incorporated under Luxembourg law. It also applies to all Luxembourg branches of the above-listed entities having their registered office in an EU country or a third country.

1. AML/CFT data collection update

The launch of the 2026 AML/CFT standardised data collection campaign was initially delayed due to ongoing revisions by the European Authority for Anti-Money Laundering (AMLA). However, the CSSF has since confirmed that the final documents have been made available by AMLA. For additional information and frequently asked questions, the CSSF has directed entities to a recorded webinar held by AMLA and the corresponding slides.

2. Adoption of AMLA templates

The CSSF will use AMLA-developed templates for data collection, replacing its usual annual questionnaire for most supervised entities. This approach ensures consistency and reduces the reporting burden.

3. Revised submission deadlines

For entities included in the AMLA data calibration sample, the deadline was updated to 22 April 2026.

For entities not included in the AMLA data calibration sample, the deadline is 22 May 2026.

Specialised professionals will continue using CSSF’s standard questionnaire.

4. Submission requirements

The questionnaire must be submitted via the CSSF eDesk platform by the compliance officer in charge of compliance with the professional obligations (the RC) or the person responsible for compliance with the professional obligations (the RR). The completion of the questionnaire may be assigned within the eDesk platform to another employee of the entity or a third party; however, the ultimate responsibility for the adequate completion of the questionnaire shall remain with the RC or the RR. This implies that the relevant person and the potential delegate hold an eDesk account, which requires a LuxTrust authentication.

5. Entity-specific requirements

Selected entities are participating in AMLA's calibration exercise, focussing on ML/TF risk assessments. Non-selected entities must report ML/TF risks using AMLA templates.

These measures reflect the CSSF's alignment with EU AML/CFT methodologies while ensuring effective risk management and compliance. For more information, the CSSF's publication and the circular letter can be found

For more information the CSSF’s publication can be found here and here