Private banking in Luxembourg: how it is regulated, how onboarding works and what documents banks ask for

Luxembourg private banks answer to the CSSF, the country's financial regulator. They must follow the Law of 12 November 2004 on money laundering, plus Circular CSSF 18/702 for private banking [1]². As of November 2026, eligible deposits are protected up to EUR 100,000 per depositor per bank ³. To open an account, you prove who you are, why you want it, and where your money and wealth came from [4]¹.

Who regulates private banks in Luxembourg, and what does that mean for me?

The CSSF supervises the banks. The rules for taking on clients come from the Law of 12 November 2004 on money laundering and terrorist financing, and Circular CSSF 18/702 adds detail for private banking [1]².

Here's how the chain works. The law sets the duty. The circular says how the CSSF expects private banks to meet it. The bank then turns both into its own forms, which is where you come in, pen in hand.

The 2004 law has been amended over the years ². The CSSF publishes an English consolidated version, but the French text on Legilux is the primary-language source ².

What this means for you: the bank's questions are part of how it has to run its own checks, and the rules expect it to document the origin of funds and, where applicable, source of wealthSource of funds and source of wealthWhere the money going into an account comes from (funds), and how you built your wealth overall (wealth). Banks ask both. ¹. So it helps to answer fully and honestly the first time.

What happens to my money if the bank fails?

Two Luxembourg schemes can step in, and each has its own limit. The deposit guarantee (FGDL) can protect eligible deposits up to EUR 100,000 per depositor, per bank ³. Investor compensation (SIIL) can cover eligible claims up to EUR 20,000 per investor per institution ⁵.

The FGDL limit applies whatever the currency and whatever your nationality or where you live ³. Qualifying temporary high balances can get higher protection, up to EUR 2.5 million for a limited period ⁶.

The SIIL is the one people misread. It applies, for example, where financial instruments can't be returned to you. It is not insurance against market losses ⁵. The FGDL doesn't cover financial instruments, and the two schemes don't both cover the same claim ⁷. Both rest on the Law of 18 December 2015 ⁷.

How does onboarding work, step by step?

Before a Luxembourg bank opens your account, the AML rules require it to identify and verify you and the person who ultimately owns the money (the "beneficial ownerBeneficial owner (UBO)The real person who ultimately owns or controls a company or trust, behind any chain of companies.") using reliable, independent sources, and to understand the purpose and intended nature of the relationship ⁴. The rules don't set one fixed document list, so banks set their evidence requirements by risk ⁴.

A politically exposed person, or PEP, is someone with a prominent public role, which brings extra checks ⁹.

Your tax-residenceTax residenceThe country that treats you as living there for tax purposes, and so can tax your worldwide income. Each country sets its own rules; your passport doesn't decide it. form has to be reasonable against the account-opening and AML/KYCKYC (know your customer)The checks a bank or provider must do on who you are, who owns your company and what you'll use the account for. information the bank holds about you ⁸. If it says you live in Portugal but your documents all point to Surrey, don't be surprised if the bank comes back with questions.

Where are the grey areas?

Much of onboarding comes down to the bank's own risk judgment. The AML rules don't prescribe one fixed document checklist, so banks set their evidence requirements by risk and two banks can treat the same person differently ⁴. These points are grey because the rules leave room for judgment.

None of these is a reason not to apply. They're reasons to prepare your file and answer honestly, although in the end the bank decides whether to take you on.

Source of wealth or source of funds: what is the difference and what will I be asked for?

Source of funds is where the specific money you're moving came from. Source of wealth is how you built up everything you own. Circular 18/702 treats documenting both, where it applies, as a central part of the bank's checks ¹.

Think of it as two questions: "Where did this transfer come from?" and "How did you get rich enough to make it?" "It's a long story" answers neither.

No fixed document list exists for either, so banks set their own evidence requirements by risk ⁴. The examples below are typical things to have ready, not legal requirements. Your bank decides what it wants.

Prepare evidence for the specific transfer and for the bigger story. Accepting a customer when the bank can't clear its doubts about either is flagged as a concern ¹.

What gets reported to HMRC if I am UK-resident or leaving?

If you're tax resident in the UK, Luxembourg has an activated arrangement to exchange Common Reporting StandardCRS (Common Reporting Standard)The global system where banks report account holders' details and balances to their tax office, which passes them to the country where the holder is tax resident. (CRS) information with the UK, per HMRC's list updated 15 October 2026 ¹¹. CRS is an international system where banks report foreign customers' accounts to their own tax office, and tax offices then swap that information with each other.

Think of it as your bank forwarding details of your account to the tax authority in your country of residence, whether or not you asked it to. In Luxembourg, banks report reportable accounts to the Administration des contributions directes, which then passes the information to the other country's tax authority, according to one bank's explanation ¹².

It starts with a form. When you open the account, you give a "self-certification", which is your own statement of where you're tax resident. HMRC says it normally includes your name, address, tax residence, tax number(s) and date of birth ⁸. It must be signed or positively affirmed, and it has to be reasonable against the rest of the bank's file on you ⁸.

Here's the change many pages skip. For certifications from 1 January 2026, account holders must declare all jurisdictions of tax residence rather than rely on treaty tie-breakerDual residence and tie-breaker testsWhen two countries both treat you as resident. A tax treaty between them usually has tie-breaker tests to decide which one wins. rules to declare only one ¹⁰. If you're halfway through leaving the UK and might be resident in two places, that is a point to take advice on, because residence depends on your individual facts and only a proper look at your own circumstances can settle it. Whatever the answer, declare what applies to you.

Those dates come from a bank's own explanation, not the legislation itself ¹².

Skipping the form doesn't necessarily switch reporting off. HMRC guidance says that if a valid self-certification can't be obtained, the account may still be reported using the information available and foreign-residence indicators ¹⁰.

Being reported is information sharing, not an accusation. Luxembourg is on HMRC's list of jurisdictions with an activated arrangement to exchange CRS information with the UK ¹¹, so it makes sense to check that your UK tax return and the information HMRC may receive tell the same story.

Why do banks decline or delay an application?

Banks decline or stall when they can't clear a doubt about where your money came from. Circular CSSF 18/702 flags as a concern accepting customers where the bank can't dispel doubts and money-laundering risks about the origin of funds or the customer's wealth ¹.

There are four patterns the rules point to.

Wealth the bank can't explain. Circular 18/702 flags as a concern accepting customers where the bank cannot dispel doubts and ML/TF risks about the origin of funds or the customer's wealth ¹. If your file shows money but not how you built it, that is the sort of gap the bank may press on. "I've just been very lucky" is unlikely to settle it.

A self-certification that doesn't fit. The form has to be reasonable against the account-opening and AML/KYC information the bank holds ⁸. Say you declare only Portugal, but your address, phone and salary are all in London. That mismatch can prompt questions from the bank, and if a valid self-certification can't be obtained, the account may still be reported using available information and foreign-residence indicators ¹⁰.

Bad press. Assessments should take credible public information, including press reporting, into account ¹. An old article about you or your company can surface, so be ready to explain it.

Being a politically exposed person (PEP). For PEPs, Article 3-2(4) requires banks to take appropriate measures to establish source of wealth and origin of funds ⁹. That's per commentary on the Law of 25 February 2021, so check the consolidated law for the exact wording ⁹.

The fix is the same for all four: a clear, consistent file, and honest answers to follow-up questions.

Luxembourg or Switzerland: which fits me?

It depends on what you need from the bank. This guide covers only Luxembourg's rules, so it can't compare the two. For any Swiss bank, check the same points: who supervises it, what deposit and investor protection applies, and how it reports to your home tax office.

Here's what you can weigh on the Luxembourg side.

A better basis for comparing banks is service, the protection that applies to you and how well the bank fits the way you hold your money.

What should I prepare before I approach a bank?

Prepare a file that answers the bank's questions before it asks them: who you are, every country you're tax resident in, where the money you're moving came from and how you built your wealth. No fixed legal list exists, so each bank sets its own ⁴.

Yes, it's a lot of paper. It's still less paper than answering the same question four times by email.

For a fuller walk-through, see our private banking onboarding guide, and for the wider picture, our Luxembourg jurisdiction page.

FAQ

Who sets the onboarding rules for Luxembourg private banks? The Law of 12 November 2004 on money laundering sets the framework ². Circular CSSF 18/702 adds the CSSF's expectations for private banking, including documenting source of funds and wealth ¹.

How much is protected if a Luxembourg bank fails? The FGDL protects eligible deposits up to EUR 100,000 per depositor per bank ³. The SIIL covers eligible investor claims up to EUR 20,000 per investor per institution, and it doesn't cover market losses ⁵.

Will Luxembourg report my account to HMRC? If you're UK tax resident and hold a reportable account, the information goes via Luxembourg's tax authority to HMRC under CRS [12]¹¹. It's information sharing, not a finding that you owe tax.

Is there a fixed document list for opening an account? No. The rules require the bank to identify and verify you and understand the account's purpose, but each bank sets its own evidence by risk ⁴.

Do I need to declare more than one tax residence? Yes, if you have more than one. From 1 January 2026, you must declare every jurisdiction where you're tax resident, not just one picked by a treaty tie-breaker ¹⁰.