Luxembourg has enacted Bill 8722, expanding the authority of its Financial Intelligence Unit (FIU) to issue real-time, cross-institution fraud alerts to traditional banks and licensed cryptocurrency exchanges. Taking effect on August 8, 2026, the law closes a critical loophole that previously prevented authorities from blocking stolen funds once transferred out of an originating bank. The reform follows a devastating 2024 CEO fraud scheme that cost the charity Caritas over $70 million.
Bill 8722 FIU authority
- ▪Luxembourg's Bill 8722, introduced in March 2026 by Justice Minister Elisabeth Margue, passed unanimously in July 2026 and took effect on August 8, 2026.
- ▪The Financial Intelligence Unit held an informational training session for compliance officers on August 6, 2026, to prepare for the implementation of Bill 8722.
- ▪Bill 8722 authorizes Luxembourg's 75-member Financial Intelligence Unit to issue cross-institution fraud alerts and broad asset-freezing notices directly to banks, payment firms, and licensed cryptocurrency exchanges.
Caritas CEO fraud catalyst
- ▪Luxembourg police recorded 6,382 fraud cases in 2024, representing a nearly 4% year-on-year increase, while fraud reports submitted by financial professionals to the Financial Intelligence Unit rose 32% to over 18,000.
- ▪The legislative changes follow a 2024 CEO fraud scheme in which impersonators stole just over $70 million from the humanitarian charity Caritas.
Crypto exchange fraud prevention
- ▪Prior to Bill 8722, banks could only block or freeze transactions within their own internal systems, leaving authorities with no statutory mechanism to notify receiving institutions once funds moved to another provider or crypto exchange.
- ▪Financial Intelligence Unit Director Max Braun stated the expanded alert system will make cashing out stolen funds more difficult for international scam syndicates and provides liability protection for crypto-wallet operators.
No-tipping-off data safeguards
- ▪Bill 8722 includes data-protection safeguards requiring that information received by professionals under the alert system be deleted within a defined retention period once its purpose is served.
- ▪Bill 8722 prohibits banks and crypto exchanges receiving a Financial Intelligence Unit alert from tipping off the affected customer or any third party that their account has been flagged.
Luxembourg crypto regulatory hub
- ▪Luxembourg has grown as a European hub for cryptocurrency platforms and digital-wallet providers following recent European Union regulatory changes.
- ▪The growth of Luxembourg's crypto sector has made digital asset wallet providers in the country an attractive target for criminals seeking to convert stolen cash into digital assets.
Story comments
Loading comments…